[Samba] ldapcmp failling
Hello, I have three DC's in an environment, and ldapcmp is failing. How can I figure out either what went wrong, or how to resolve the issue so that the databases are truly in sync? * Comparing [DOMAIN] context... * Objects to be compared: 2277 Comparing: 'CN=Builtin,DC=ad,DC=domain,DC=com' [ldap://192.168.10.81] 'CN=Builtin,DC=ad,DC=domain,DC=com' [ldap://192.168.10.9] Attributes found only in ldap://192.168.10.81: serverState FAILED Comparing: 'DC=ad,DC=domain,DC=com' [ldap://192.168.10.81] 'DC=ad,DC=domain,DC=com' [ldap://192.168.10.9] Attributes found only in ldap://192.168.10.81: msDS-NcType serverState FAILED * Result for [DOMAIN]: FAILURE SUMMARY - Attributes found only in ldap://192.168.10.81: msDS-NcType serverState ERROR: Compare failed: -1 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share working with IP not with hostname
On 09/10/12 13:52, Nitin Thakur wrote: hi guys I managed to setup the share. I am able to access the share with IP address, but as soon as I try to do it via hostname, I get a user name and password pop up, which always fail to authenticate. Any setting I am missing? Thanks nitin What version of Samba? My guess is there is some sort of name lookup mismatch.Are you using a domain or workgroup? Are you using WINS? Are you using DNS?If the samba server is the WINS server you should be able to cat wins.dat and tdbdump wins.tbd to verify that the names are the same. In smb.conf, does the samba server netbios name match the DNS name? What is the client OS? The only other thing that might be happening is that the client and server are mismatching on using NTLM vs NTLM v2. The samba logs should show that. I could NOT get NTLMv2 to work on my samba servers I had to explicitly disable it in smb.conf. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share working with IP not with hostname
On 10/09/12 01:52 PM, Nitin Thakur wrote: hi guys I managed to setup the share. I am able to access the share with IP address, but as soon as I try to do it via hostname, I get a user name and password pop up, which always fail to authenticate. Any setting I am missing? Thanks nitin I'm guessing you have a recent Windows client. Try the settings at http://technet.microsoft.com/en-us/library/ee681622%28v=ws.10%29.aspx (there's also a similar thing on the Samba.org site but I can't find it right now). However, I do remember that there are two registry keys that need to be set/changed with Windows 7. After that, everything works. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] syntax of samba-tool to deal with SRV DNS record
On 9/11/12, Alain Foucher a.fouc...@cht.nc wrote: I tried to use the quotes around the data but i got another error message ERROR: Data requires 4 elements - server, port, priority, weight any Idea I suppose you use them incorrectly :) Compare with my yesterday's experiments: samba-tool dns add pdc-srv.my.domain. my.domain _kerberos-adm._tcp SRV 'pdc-srv.my.domain. 88 100 0' samba-tool dns update pdc-srv.my.domain. my.domain _kerberos-adm._tcp SRV 'pdc-srv.my.domain. 88 100 0' 'pdc-srv.my.domain. 88 0 100' samba-tool dns update pdc-srv.my.domain. my.domain _kerberos-adm._tcp SRV 'pdc-srv.my.domain. 88 0 100' 'pdc-srv.my.domain. 749 0 100' samba-tool dns delete pdc-srv.my.domain. my.domain _kerberos-adm._tcp SRV 'pdc-srv.my.domain. 749 0 100' -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] errors in log: Failed to bind to uuid ...@ncalrpc
What this entry from from log may mean? [2012/09/10 09:55:01, 0] ../source4/rpc_server/netlogon/dcerpc_netlogon.c:1256(dcesrv_netr_LogonGetCapabilities) ../source4/rpc_server/netlogon/dcerpc_netlogon.c:1256 Bad credentials - error [2012/09/10 09:55:01, 0] ../source4/librpc/rpc/dcerpc_util.c:660(dcerpc_pipe_auth_recv) Failed to bind to uuid 12345678-1234-abcd-ef00-01234567cffb for 12345678-1234-abcd-ef00-01234567cffb@ncalrpc:127.0.0.1[DEFAULT,sign,seal] NT_STATUS_UNSUCCESSFUL -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] reverse dns zone managed by samba4
While it's possible to create reverse zone in samba4 directory, it's impossible to update it the same way as forward zone. So my current setup has forward zone stored in AD and reverse one stored in good old flat file. Does any solution exist which allows to store in samba4 AD? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share working with IP not with hostname
This is the trick for successfully access the share with the hostname.. Be sure you have the following lines in the smb.conf: netbios name = yourhostname wins support = yes The following line in this order. name resolve order = wins lmhosts hosts bcast Add the following line: hosts allow = the host ip / mask Where the host ip is your server ip. the mask is the mask you are using in all your windows clients. This is the most important thing. For example If you have in your server the mask 255.255.0.0 then all your clients must have the same network mask. Windows clients with the same mask of the server will see the server on the network with it hostname otherwise you need to access the server by its ip number. I hope this can help you. Carlos Santo Domingo, Dominican Republic On 9/12/2012 10:37 AM, Gaiseric Vandal wrote: On 09/10/12 13:52, Nitin Thakur wrote: hi guys I managed to setup the share. I am able to access the share with IP address, but as soon as I try to do it via hostname, I get a user name and password pop up, which always fail to authenticate. Any setting I am missing? Thanks nitin What version of Samba? My guess is there is some sort of name lookup mismatch.Are you using a domain or workgroup? Are you using WINS? Are you using DNS?If the samba server is the WINS server you should be able to cat wins.dat and tdbdump wins.tbd to verify that the names are the same. In smb.conf, does the samba server netbios name match the DNS name? What is the client OS? The only other thing that might be happening is that the client and server are mismatching on using NTLM vs NTLM v2. The samba logs should show that. I could NOT get NTLMv2 to work on my samba servers I had to explicitly disable it in smb.conf. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 34bd3cb WHATSNEW: provision and updateprovision have new names
via 2c42550 s4:scripting: rename upgradeprovision -
samba_upgradeprovision
via a0baaf2 s4:setup: remove standalone 'provision'
from e8375dd smbd: Add extra VFS hooks to get the posix ACL as a blob
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 34bd3cba7a809e103b21c64c75230d0dc259382c
Author: Stefan Metzmacher me...@samba.org
Date: Tue Sep 11 10:22:14 2012 +0200
WHATSNEW: provision and updateprovision have new names
metze
Autobuild-User(master): Stefan Metzmacher me...@samba.org
Autobuild-Date(master): Wed Sep 12 08:48:16 CEST 2012 on sn-devel-104
commit 2c4255084a036a8d9b029484c6fceedd989cd79b
Author: Stefan Metzmacher me...@samba.org
Date: Mon Sep 10 14:52:35 2012 +0200
s4:scripting: rename upgradeprovision - samba_upgradeprovision
metze
commit a0baaf2064f5abbca0b29d5d3cb538e78091e332
Author: Stefan Metzmacher me...@samba.org
Date: Mon Sep 10 15:15:41 2012 +0200
s4:setup: remove standalone 'provision'
metze
---
Summary of changes:
WHATSNEW.txt |6 +
.../{upgradeprovision = samba_upgradeprovision} |0
source4/scripting/bin/wscript_build|2 +-
source4/scripting/wscript_build|2 +-
source4/setup/provision| 273
source4/setup/tests/blackbox_upgradeprovision.sh |4 +-
source4/setup/wscript_build|6 -
7 files changed, 10 insertions(+), 283 deletions(-)
rename source4/scripting/bin/{upgradeprovision = samba_upgradeprovision}
(100%)
delete mode 100755 source4/setup/provision
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 8efeecb..07ece29 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -125,6 +125,12 @@ The option kernel share modes has been introduced to be
able
to turn the translation of SMB share modes into kernel flocks
off.
+The 'provision' script was merged into 'samba-tool'
+as 'samba-tool domain provision' the arguments are still
+the same.
+
+The 'updateprovision' script was renamed to 'samba_upgradeprovision'.
+
CHANGES SINCE beta7
=
diff --git a/source4/scripting/bin/upgradeprovision
b/source4/scripting/bin/samba_upgradeprovision
similarity index 100%
rename from source4/scripting/bin/upgradeprovision
rename to source4/scripting/bin/samba_upgradeprovision
diff --git a/source4/scripting/bin/wscript_build
b/source4/scripting/bin/wscript_build
index e95fd03..1f1ead9 100644
--- a/source4/scripting/bin/wscript_build
+++ b/source4/scripting/bin/wscript_build
@@ -1,5 +1,5 @@
#!/usr/bin/env python
if bld.CONFIG_SET('AD_DC_BUILD_IS_ENABLED'):
-for script in ['samba-tool', 'samba_dnsupdate', 'samba_spnupdate',
'samba_kcc', 'upgradeprovision', 'samba_upgradedns']:
+for script in ['samba-tool', 'samba_dnsupdate', 'samba_spnupdate',
'samba_kcc', 'samba_upgradeprovision', 'samba_upgradedns']:
bld.SAMBA_SCRIPT(script, pattern=script, installdir='.')
diff --git a/source4/scripting/wscript_build b/source4/scripting/wscript_build
index ddd5533..9af23f6 100644
--- a/source4/scripting/wscript_build
+++ b/source4/scripting/wscript_build
@@ -4,7 +4,7 @@ from samba_utils import MODE_755
sbin_files = None
if bld.CONFIG_SET('AD_DC_BUILD_IS_ENABLED'):
-sbin_files = 'bin/upgradeprovision bin/samba_dnsupdate bin/samba_spnupdate
bin/samba_upgradedns bin/samba_kcc'
+sbin_files = 'bin/samba_upgradeprovision bin/samba_dnsupdate
bin/samba_spnupdate bin/samba_upgradedns bin/samba_kcc'
if sbin_files:
bld.INSTALL_FILES('${SBINDIR}',
diff --git a/source4/setup/provision b/source4/setup/provision
deleted file mode 100755
index 6cb4674..000
--- a/source4/setup/provision
+++ /dev/null
@@ -1,273 +0,0 @@
-#!/usr/bin/env python
-#
-# Unix SMB/CIFS implementation.
-# provision a Samba4 server
-# Copyright (C) Jelmer Vernooij jel...@samba.org 2007-2008
-# Copyright (C) Andrew Bartlett abart...@samba.org 2008
-#
-# Based on the original in EJS:
-# Copyright (C) Andrew Tridgell 2005
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program. If not, see
[SCM] Samba Shared Repository - branch v3-5-test updated
The branch, v3-5-test has been updated
via b20ca77 s3: delete requests are not special
from 30567b8 s3: Fix bug #9085.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test
- Log -
commit b20ca77e2a9d111eb2e77d0b804fe7505b07e418
Author: Volker Lendecke v...@samba.org
Date: Mon Sep 10 11:25:03 2012 +0200
s3: delete requests are not special
The only difference between batch and exclusive oplocks is the time of
the check: Batch is checked before the share mode check, exclusive after.
Signed-off-by: Jeremy Allison j...@samba.org
Fix bug #9150 - Valid open requests can cause smbd assert due to incorrect
oplock handling on delete requests.
---
Summary of changes:
source3/smbd/open.c | 13 ++---
1 files changed, 2 insertions(+), 11 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index dfa45ef..843bb2b 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -894,11 +894,6 @@ static NTSTATUS open_mode_check(connection_struct *conn,
return NT_STATUS_OK;
}
-static bool is_delete_request(files_struct *fsp) {
- return ((fsp-access_mask == DELETE_ACCESS)
- (fsp-oplock_type == NO_OPLOCK));
-}
-
/*
* Send a break message to the oplock holder and delay the open for
* our client.
@@ -1002,13 +997,9 @@ static bool delay_for_oplocks(struct share_mode_lock *lck,
}
if (exclusive != NULL) { /* Found an exclusive oplock */
- bool delay_it = is_delete_request(fsp) ?
- BATCH_OPLOCK_TYPE(exclusive-op_type) : true;
SMB_ASSERT(!have_level2);
- if (delay_it) {
- send_break_message(fsp, exclusive, mid, oplock_request);
- return true;
- }
+ send_break_message(fsp, exclusive, mid, oplock_request);
+ return true;
}
/*
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 45f8f97 lib/krb5_wrap: when deleting default realm, pass char*, not
char**
via d55980c s3-pdb: filter out more symbols only used in ldapsam
internals
from 34bd3cb WHATSNEW: provision and updateprovision have new names
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 45f8f979378c521c0b9e6df606cfe3558f6ee7b1
Author: Alexander Bokovoy a...@samba.org
Date: Tue Sep 11 20:12:42 2012 +0300
lib/krb5_wrap: when deleting default realm, pass char*, not char**
Autobuild-User(master): Alexander Bokovoy a...@samba.org
Autobuild-Date(master): Wed Sep 12 10:33:37 CEST 2012 on sn-devel-104
commit d55980ccad2fec5d88fceb5eef9df8df647f4e9f
Author: Alexander Bokovoy a...@samba.org
Date: Tue Sep 11 12:29:49 2012 +0300
s3-pdb: filter out more symbols only used in ldapsam internals
---
Summary of changes:
lib/krb5_wrap/krb5_samba.c|2 +-
source3/passdb/ABI/pdb-0.sigs |1 -
source3/wscript_build |2 +-
3 files changed, 2 insertions(+), 3 deletions(-)
Changeset truncated at 500 lines:
diff --git a/lib/krb5_wrap/krb5_samba.c b/lib/krb5_wrap/krb5_samba.c
index 2d237ff..1a5a710 100644
--- a/lib/krb5_wrap/krb5_samba.c
+++ b/lib/krb5_wrap/krb5_samba.c
@@ -2001,7 +2001,7 @@ krb5_error_code smb_krb5_make_principal(krb5_context
context,
va_end(ap);
if (free_realm) {
- krb5_free_default_realm(context, realm);
+ krb5_free_default_realm(context, realm);
}
return code;
diff --git a/source3/passdb/ABI/pdb-0.sigs b/source3/passdb/ABI/pdb-0.sigs
index 2bccc08..2b57301 100644
--- a/source3/passdb/ABI/pdb-0.sigs
+++ b/source3/passdb/ABI/pdb-0.sigs
@@ -35,7 +35,6 @@ get_privileges_for_sid_as_set: NTSTATUS (TALLOC_CTX *,
PRIVILEGE_SET **, struct
get_privileges_for_sids: bool (uint64_t *, struct dom_sid *, int)
get_trust_pw_clear: bool (const char *, char **, const char **, enum
netr_SchannelType *)
get_trust_pw_hash: bool (const char *, uint8_t *, const char **, enum
netr_SchannelType *)
-get_userattr_list: const char **(TALLOC_CTX *, int)
gid_to_sid: void (struct dom_sid *, gid_t)
gid_to_unix_groups_sid: void (gid_t, struct dom_sid *)
grab_named_mutex: struct named_mutex *(TALLOC_CTX *, const char *, int)
diff --git a/source3/wscript_build b/source3/wscript_build
index 2903594..c7395e7 100755
--- a/source3/wscript_build
+++ b/source3/wscript_build
@@ -711,7 +711,7 @@ private_pdb_match.append('!idmap_xids_to_sids')
# ldap module is actually three modules merged together: ldapsam, ipa, and nds
static_pdb_match = static_pdb_match + ['ldap', 'ipa', 'nds']
-ldapsam_pdb_match = ['!priv2ld', '!smbldap_search_domain_info', '!ldapsam_*',
'!groupmap_attr_list*']
+ldapsam_pdb_match = ['!priv2ld', '!smbldap_search_domain_info', '!ldapsam_*',
'!groupmap_attr_list*', '!get_userattr_list']
private_pdb_match.append('!pdb_nds_*')
private_pdb_match.append('!pdb_init_ldapsam')
private_pdb_match = private_pdb_match + ldapsam_pdb_match
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 2eb429d docs: Fix typo. from 45f8f97 lib/krb5_wrap: when deleting default realm, pass char*, not char** http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 2eb429d90652011a7d1b0caaf29ae106f2cfadd8 Author: Karolin Seeger ksee...@samba.org Date: Wed Sep 12 09:55:41 2012 +0200 docs: Fix typo. Karolin Autobuild-User(master): Karolin Seeger ksee...@samba.org Autobuild-Date(master): Wed Sep 12 12:21:00 CEST 2012 on sn-devel-104 --- Summary of changes: docs-xml/manpages/vfs_aio_linux.8.xml |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/manpages/vfs_aio_linux.8.xml b/docs-xml/manpages/vfs_aio_linux.8.xml index cb86b10..e26fbe6 100644 --- a/docs-xml/manpages/vfs_aio_linux.8.xml +++ b/docs-xml/manpages/vfs_aio_linux.8.xml @@ -98,7 +98,7 @@ refsect1 titleVERSION/title - paraThis man page is correct for version 4.0.6 of the Samba suite. + paraThis man page is correct for version 4.0 of the Samba suite. /para /refsect1 -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 1f8c9ab s3-rap: Open printers with the right access mask.
via 937cdd1 docs: Build manpages correctly.
via 66a87d7 wafsamba: Add a SAMBAMANPAGES function.
via 66d926f docs: Bump version up to 4.0.
from 2eb429d docs: Fix typo.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 1f8c9ab88e7a2e28e503e99baabb88c3cebbc4b6
Author: Andreas Schneider a...@samba.org
Date: Wed Sep 12 12:12:58 2012 +0200
s3-rap: Open printers with the right access mask.
Autobuild-User(master): Andreas Schneider a...@cryptomilk.org
Autobuild-Date(master): Wed Sep 12 14:05:42 CEST 2012 on sn-devel-104
commit 937cdd1e463b19bc2b99e51734cd811d78f3e1e5
Author: Andreas Schneider a...@samba.org
Date: Tue Sep 11 17:50:45 2012 +0200
docs: Build manpages correctly.
commit 66a87d7cbe193a0c1e1c62a39ebbfc88a318a79d
Author: Andreas Schneider a...@samba.org
Date: Tue Sep 11 17:50:26 2012 +0200
wafsamba: Add a SAMBAMANPAGES function.
commit 66d926fa2d09f06f561168f4516b3a6055d100f7
Author: Andreas Schneider a...@samba.org
Date: Tue Sep 11 14:47:06 2012 +0200
docs: Bump version up to 4.0.
---
Summary of changes:
buildtools/wafsamba/wafsamba.py | 16 +++-
docs-xml/manpages/idmap_ad.8.xml |4 +---
docs-xml/manpages/idmap_autorid.8.xml |2 +-
docs-xml/manpages/idmap_hash.8.xml|2 +-
docs-xml/manpages/idmap_ldap.8.xml|2 +-
docs-xml/manpages/idmap_nss.8.xml |2 +-
docs-xml/manpages/idmap_rid.8.xml |2 +-
docs-xml/manpages/idmap_tdb.8.xml |2 +-
docs-xml/manpages/idmap_tdb2.8.xml|2 +-
docs-xml/wscript_build|2 +-
source3/smbd/lanman.c |6 +++---
11 files changed, 27 insertions(+), 15 deletions(-)
Changeset truncated at 500 lines:
diff --git a/buildtools/wafsamba/wafsamba.py b/buildtools/wafsamba/wafsamba.py
index 50c3f36..1f71bd3 100644
--- a/buildtools/wafsamba/wafsamba.py
+++ b/buildtools/wafsamba/wafsamba.py
@@ -774,7 +774,6 @@ Build.BuildContext.INSTALL_DIRS = INSTALL_DIRS
def MANPAGES(bld, manpages):
'''build and install manual pages'''
bld.env.MAN_XSL =
'http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl'
-os.environ[XML_CATALOG_FILES] = 'file:///etc/xml/catalog file://' +
bld.srcnode.abspath() + '/bin/default/docs-xml/build/catalog.xml'
for m in manpages.split():
source = m + '.xml'
bld.SAMBA_GENERATOR(m,
@@ -786,6 +785,21 @@ def MANPAGES(bld, manpages):
bld.INSTALL_FILES('${MANDIR}/man%s' % m[-1], m, flat=True)
Build.BuildContext.MANPAGES = MANPAGES
+def SAMBAMANPAGES(bld, manpages):
+'''build and install manual pages'''
+bld.env.SAMBA_EXPAND_XSL = bld.srcnode.abspath() +
'/docs-xml/xslt/expand-sambadoc.xsl'
+bld.env.SAMBA_MAN_XSL = bld.srcnode.abspath() + '/docs-xml/xslt/man.xsl'
+os.environ[XML_CATALOG_FILES] = 'file:///etc/xml/catalog file://' +
bld.srcnode.abspath() + '/bin/default/docs-xml/build/catalog.xml'
+for m in manpages.split():
+source = m + '.xml'
+bld.SAMBA_GENERATOR(m,
+source=source,
+target=m,
+group='final',
+rule='${XSLTPROC} --xinclude --stringparam
noreference 0 -o ${TGT}.xml --nonet ${SAMBA_EXPAND_XSL} ${SRC} ${XSLTPROC}
--nonet -o ${TGT} ${SAMBA_MAN_XSL} ${TGT}.xml'
+)
+bld.INSTALL_FILES('${MANDIR}/man%s' % m[-1], m, flat=True)
+Build.BuildContext.SAMBAMANPAGES = SAMBAMANPAGES
#
# give a nicer display when building different types of files
diff --git a/docs-xml/manpages/idmap_ad.8.xml b/docs-xml/manpages/idmap_ad.8.xml
index 7319f91..2ae7fc8 100644
--- a/docs-xml/manpages/idmap_ad.8.xml
+++ b/docs-xml/manpages/idmap_ad.8.xml
@@ -7,7 +7,7 @@
manvolnum8/manvolnum
refmiscinfo class=sourceSamba/refmiscinfo
refmiscinfo class=manualSystem Administration tools/refmiscinfo
- refmiscinfo class=version3.6/refmiscinfo
+ refmiscinfo class=version4.0/refmiscinfo
/refmeta
@@ -27,8 +27,6 @@
group objects in the AD./para
para
- Note that the idmap_ad module has changed considerably since
- Samba versions 3.0 and 3.2.
Currently, the parameterad/parameter backend
does not work as the the default idmap backend, but one has
to configure it separately for each domain for which one wants
diff --git a/docs-xml/manpages/idmap_autorid.8.xml
b/docs-xml/manpages/idmap_autorid.8.xml
index 3b93861..ed698e9 100644
--- a/docs-xml/manpages/idmap_autorid.8.xml
+++ b/docs-xml/manpages/idmap_autorid.8.xml
@@ -7,7 +7,7 @@
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 51a4094 s3: remove unneeded noquota.c file
from 1f8c9ab s3-rap: Open printers with the right access mask.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 51a409455d672020e38f6eeb5a56900a7ea04078
Author: Björn Jacke b...@sernet.de
Date: Tue Sep 11 09:22:11 2012 +0200
s3: remove unneeded noquota.c file
Autobuild-User(master): Björn Jacke b...@sernet.de
Autobuild-Date(master): Wed Sep 12 16:50:50 CEST 2012 on sn-devel-104
---
Summary of changes:
source3/smbd/noquotas.c | 38 --
1 files changed, 0 insertions(+), 38 deletions(-)
delete mode 100644 source3/smbd/noquotas.c
Changeset truncated at 500 lines:
diff --git a/source3/smbd/noquotas.c b/source3/smbd/noquotas.c
deleted file mode 100644
index 6b67bb1..000
--- a/source3/smbd/noquotas.c
+++ /dev/null
@@ -1,38 +0,0 @@
-/*
- Unix SMB/CIFS implementation.
- No support for quotas :-).
- Copyright (C) Andrew Tridgell 1992-1998
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program. If not, see http://www.gnu.org/licenses/.
-*/
-
-#include includes.h
-#include smbd/smbd.h
-
-/*
- * Needed for auto generation of proto.h.
- */
-
-bool disk_quotas(const char *path,uint64_t *bsize,uint64_t *dfree,uint64_t
*dsize)
-{
- (*bsize) = 512; /* This value should be ignored */
-
- /* And just to be sure we set some values that hopefully */
- /* will be larger that any possible real-world value */
- (*dfree) = (uint64_t)-1;
- (*dsize) = (uint64_t)-1;
-
- /* As we have select not to use quotas, allways fail */
- return False;
-}
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via a11e45f selftest: let provision_plugin_s4_dc use SMB3 via 72720d6 wintest: Fix --use-ntvfs handling via ee4d1c4 wintest: Rework support for the internal DNS server via fee7575 s4 provision: Ask for the dns forwarder IP address during interactive provision via 1627fcd dns_server: Remove parameter 'dns recursive queries' and base this on 'dns forwarder' via 5cac79a wintest: try to fix settings for the internal dns server via 1b848ec lib/param: change the default for 'allow dns updates' to 'secure only' via ea1841e lib/param: add some more alias for 'allow dns updates' options. via 2df6142 WHATSNEW.txt: Update DNS server description via 9583366 s4:dns_server: remove wrong and unused dsdb_check_access_on_dn() check via 61a07df dns_server: Attempt to SET and UNSET the sessionInfo to match the incoming user via c4aef88 s4:samba_upgradedns: delete dns-HOSTNAME account if using the internal dns server via 1e00c0d selftest:Samba4: don't provision with BIND9_DLZ via 0c55510 s4:upgradehelpers.py: don't require a dns-$HOSTNAME account via 50084e5 s4:provision: don't add the dns-HOSTNAME account if we use the internal dns server via 6ff5884 loadparm: dns is now a default server service via 56058ea s4 dns: use the internal DNS server per default via 2af8129 s4 dns: Add libaddns-based simple tests via 76801b5 s4 dns: Run python tests in fl2003dc env via cf3aab6 s4 dns: Improve logging of delegated dns updates via aa1e84a s4:selftest: run thet dlz_bind9. tests in the chgdcpass env from 51a4094 s3: remove unneeded noquota.c file http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit a11e45f1c5268e798124fe9e0716b7b9d0557014 Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 12 14:10:55 2012 +0200 selftest: let provision_plugin_s4_dc use SMB3 metze Autobuild-User(master): Stefan Metzmacher me...@samba.org Autobuild-Date(master): Wed Sep 12 18:30:48 CEST 2012 on sn-devel-104 commit 72720d6ea0ec9b340e217986a3e136ef0635bd1f Author: Andrew Bartlett abart...@samba.org Date: Wed Sep 12 19:40:16 2012 +1000 wintest: Fix --use-ntvfs handling Signed-off-by: Stefan Metzmacher me...@samba.org commit ee4d1c406208d67aaa949934da78cd350e69ccf0 Author: Andrew Bartlett abart...@samba.org Date: Wed Sep 12 18:34:41 2012 +1000 wintest: Rework support for the internal DNS server We still have to run BIND, the change is if BIND is run to support our own zone, or if we forward to as well as to windows. This also adapts to the new defaults. Andrew Bartlett Signed-off-by: Stefan Metzmacher me...@samba.org commit fee75752fb9f0926bc9d7ea5731ef72d2197b9e3 Author: Kai Blin k...@samba.org Date: Wed Sep 12 12:31:38 2012 +0200 s4 provision: Ask for the dns forwarder IP address during interactive provision Signed-off-by: Stefan Metzmacher me...@samba.org commit 1627fcda3eff6e636438c90d07ffcfd497ea68e2 Author: Andrew Bartlett abart...@samba.org Date: Wed Sep 12 18:07:58 2012 +1000 dns_server: Remove parameter 'dns recursive queries' and base this on 'dns forwarder' This simplifies a very common configuration. Andrew Bartlett Signed-off-by: Stefan Metzmacher me...@samba.org commit 5cac79abce9f7d30e28cbf15a94c7e92818a91ca Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 12 09:49:59 2012 +0200 wintest: try to fix settings for the internal dns server metze commit 1b848ecbffe5761ba8c6368a3eae24c3ee10cfce Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 12 09:31:17 2012 +0200 lib/param: change the default for 'allow dns updates' to 'secure only' metze commit ea1841ee10a25e654ff1f7dde6518707c9d1581a Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 12 09:39:06 2012 +0200 lib/param: add some more alias for 'allow dns updates' options. metze commit 2df614243928bcd47983e0b0368cd6de49567209 Author: Kai Blin k...@samba.org Date: Wed Sep 12 01:59:03 2012 +0200 WHATSNEW.txt: Update DNS server description Signed-off-by: Stefan Metzmacher me...@samba.org commit 9583366d1eba609e902b885244735b9c981cec9c Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 12 14:42:18 2012 +0200 s4:dns_server: remove wrong and unused dsdb_check_access_on_dn() check metze commit 61a07df824f2231609b2b3bd157e995f623425a3 Author: Andrew Bartlett abart...@samba.org Date: Tue Sep 11 20:59:51 2012 +1000 dns_server: Attempt to SET and UNSET the sessionInfo to match the incoming user This avoids re-opening the DB as the correct user, but applies all the right ACLs and resulting owner. This needs a bit more
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-09-12-1925/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2012-09-12-1925/samba3.stderr http://git.samba.org/autobuild.flakey/2012-09-12-1925/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2012-09-12-1925/samba.stderr http://git.samba.org/autobuild.flakey/2012-09-12-1925/samba.stdout The top commit at the time of the failure was: commit 51a409455d672020e38f6eeb5a56900a7ea04078 Author: Björn Jacke b...@sernet.de Date: Tue Sep 11 09:22:11 2012 +0200 s3: remove unneeded noquota.c file Autobuild-User(master): Björn Jacke b...@sernet.de Autobuild-Date(master): Wed Sep 12 16:50:50 CEST 2012 on sn-devel-104
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 893b213 Avoid overriding default ccache for ads operations.
from a11e45f selftest: let provision_plugin_s4_dc use SMB3
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 893b21387665a7b644355d60f6fbccaf48ffaedb
Author: Simo Sorce i...@samba.org
Date: Fri Sep 7 14:14:08 2012 -0400
Avoid overriding default ccache for ads operations.
Avoid overriding default ccache for ads operations.
Nowadays various samba components may need to use GSSAPI and a default cred
cache to perform their tasks.
This code was completely overriding the whole process default ccache name,
thus
altering the current credentials and sometimes hijacking them (or getting
preemptively hijaked).
By using gss_krb5_import_cred we can instead use a private ccache (necessary
sometimes to use a different set of credentials fromt he default
cifs/fqdn@realm one, for example when contacting foreign DCs using trust
credentials) that does not affect the rest of the process.
For the kerberos versions which don't have gss_krb5_import_cred
we fallback to temp override of KRB5CCNAME and gss_acquire_cred.
Signed-off-by: Alexander Bokovoy a...@samba.org
Signed-off-by: Günther Deschner g...@samba.org
Autobuild-User(master): Alexander Bokovoy a...@samba.org
Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104
---
Summary of changes:
source3/include/ads.h |1 +
source3/include/proto.h |2 +-
source3/libads/ads_struct.c |1 +
source3/libads/kerberos_util.c |8 ++-
source3/libads/sasl.c | 92 +--
source3/libsmb/cliconnect.c |2 +-
source3/libsmb/clispnego.c |4 +-
source3/winbindd/winbindd_ads.c |6 +-
8 files changed, 102 insertions(+), 14 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/include/ads.h b/source3/include/ads.h
index 91a0f81..3de1d8b 100644
--- a/source3/include/ads.h
+++ b/source3/include/ads.h
@@ -45,6 +45,7 @@ typedef struct ads_struct {
char *kdc_server;
unsigned flags;
int time_offset;
+ char *ccache_name;
time_t tgt_expire;
time_t tgs_expire;
time_t renewable;
diff --git a/source3/include/proto.h b/source3/include/proto.h
index 6dbdf4e..b3fa55a 100644
--- a/source3/include/proto.h
+++ b/source3/include/proto.h
@@ -768,7 +768,7 @@ int spnego_gen_krb5_negTokenInit(TALLOC_CTX *ctx,
const char *principal, int time_offset,
DATA_BLOB *targ,
DATA_BLOB *session_key_krb5, uint32 extra_ap_opts,
- time_t *expire_time);
+ const char *ccname, time_t *expire_time);
bool spnego_parse_challenge(TALLOC_CTX *ctx, const DATA_BLOB blob,
DATA_BLOB *chal1, DATA_BLOB *chal2);
DATA_BLOB spnego_gen_auth(TALLOC_CTX *ctx, DATA_BLOB blob);
diff --git a/source3/libads/ads_struct.c b/source3/libads/ads_struct.c
index 45d00a3..fd7e417 100644
--- a/source3/libads/ads_struct.c
+++ b/source3/libads/ads_struct.c
@@ -201,6 +201,7 @@ void ads_destroy(ADS_STRUCT **ads)
SAFE_FREE((*ads)-auth.password);
SAFE_FREE((*ads)-auth.user_name);
SAFE_FREE((*ads)-auth.kdc_server);
+ SAFE_FREE((*ads)-auth.ccache_name);
SAFE_FREE((*ads)-config.realm);
SAFE_FREE((*ads)-config.bind_path);
diff --git a/source3/libads/kerberos_util.c b/source3/libads/kerberos_util.c
index 7d49c02..645b058 100644
--- a/source3/libads/kerberos_util.c
+++ b/source3/libads/kerberos_util.c
@@ -63,9 +63,11 @@ int ads_kinit_password(ADS_STRUCT *ads)
return KRB5_LIBOS_CANTREADPWD;
}
- ret = kerberos_kinit_password_ext(s, ads-auth.password,
ads-auth.time_offset,
- ads-auth.tgt_expire, NULL, NULL, False, False,
ads-auth.renewable,
- NULL);
+ ret = kerberos_kinit_password_ext(s, ads-auth.password,
+ ads-auth.time_offset,
+ ads-auth.tgt_expire, NULL,
+ ads-auth.ccache_name, false, false,
+ ads-auth.renewable, NULL);
if (ret) {
DEBUG(0,(kerberos_kinit_password %s failed: %s\n,
diff --git a/source3/libads/sasl.c b/source3/libads/sasl.c
index 438db05..33f4e24 100644
--- a/source3/libads/sasl.c
+++ b/source3/libads/sasl.c
@@ -271,6 +271,74 @@ static ADS_STATUS ads_sasl_spnego_ntlmssp_bind(ADS_STRUCT
*ads)
}
#ifdef HAVE_KRB5
+static
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via f5a2379 In vfs modules, don't use 'conn-origpath' when we really
mean 'conn-cwd'.
via b6636af Move cached cwd onto conn struct.
via a8676e6 Remove ancient optimization global LastDir.
from 893b213 Avoid overriding default ccache for ads operations.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit f5a23797949334b3b37a40b8308e0db7ddff9bda
Author: Jeremy Allison j...@samba.org
Date: Wed Sep 12 11:42:57 2012 -0700
In vfs modules, don't use 'conn-origpath' when we really mean 'conn-cwd'.
This allows VFS modules to work even when we've changed directory
under the connect path in order to do root-safe calls.
Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Wed Sep 12 23:45:23 CEST 2012 on sn-devel-104
commit b6636affaf4d475487e49ed8d5a31b94b82ae6d0
Author: Jeremy Allison j...@samba.org
Date: Wed Sep 12 11:39:37 2012 -0700
Move cached cwd onto conn struct.
This enables us to make VFS modules safe for use in root called
code when we've changed directory under conn-connectpath.
commit a8676e69a636648d8a309e8e000dcd62d38bfa06
Author: Jeremy Allison j...@samba.org
Date: Wed Sep 12 11:21:01 2012 -0700
Remove ancient optimization global LastDir.
---
Summary of changes:
source3/include/vfs.h |2 ++
source3/modules/vfs_netatalk.c | 14 +++---
source3/modules/vfs_preopen.c |2 +-
source3/modules/vfs_smb_traffic_analyzer.c |2 +-
source3/modules/vfs_streams_depot.c|2 +-
source3/smbd/globals.c |1 -
source3/smbd/globals.h |1 -
source3/smbd/service.c |6 ++
source3/smbd/vfs.c | 23 +--
9 files changed, 27 insertions(+), 26 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/include/vfs.h b/source3/include/vfs.h
index 8e48803..c83e7ed 100644
--- a/source3/include/vfs.h
+++ b/source3/include/vfs.h
@@ -145,6 +145,7 @@
/* Leave at 29 - not yet released. Add durable handle functions - metze/obnox
*/
/* Leave at 29 - not yet released. Added sys_acl_blob_get_file and
sys_acl_blob_get_fd */
/* Bump to version 30 - Samba 4.0.0 will ship with interface version 30 */
+/* Leave at 30 - not yet released. Added conn-cwd to save vfs_GetWd() calls.
*/
#define SMB_VFS_INTERFACE_VERSION 30
/*
@@ -315,6 +316,7 @@ typedef struct connection_struct {
enum timestamp_set_resolution ts_res;
char *connectpath;
char *origpath;
+ char *cwd; /* Working directory. */
struct vfs_handle_struct *vfs_handles; /* for the new plugins
*/
diff --git a/source3/modules/vfs_netatalk.c b/source3/modules/vfs_netatalk.c
index a457355..ff16ae3 100644
--- a/source3/modules/vfs_netatalk.c
+++ b/source3/modules/vfs_netatalk.c
@@ -229,7 +229,7 @@ static int atalk_rmdir(struct vfs_handle_struct *handle,
const char *path)
TALLOC_CTX *ctx = 0;
char *dpath;
- if (!handle-conn-origpath || !path) goto exit_rmdir;
+ if (!handle-conn-cwd || !path) goto exit_rmdir;
/* due to there is no way to change bDeleteVetoFiles variable
* from this module, gotta use talloc stuff..
@@ -241,7 +241,7 @@ static int atalk_rmdir(struct vfs_handle_struct *handle,
const char *path)
goto exit_rmdir;
if (!(dpath = talloc_asprintf(ctx, %s/%s%s,
- handle-conn-origpath, path, add ? /APPLEDOUBLE : )))
+ handle-conn-cwd, path, add ? /APPLEDOUBLE : )))
goto exit_rmdir;
atalk_rrmdir(ctx, dpath);
@@ -272,7 +272,7 @@ static int atalk_rename(struct vfs_handle_struct *handle,
return ret;
}
- if (atalk_build_paths(talloc_tos(), handle-conn-origpath, oldname,
+ if (atalk_build_paths(talloc_tos(), handle-conn-cwd, oldname,
adbl_path, orig_path, adbl_info,
orig_info) != 0)
goto exit_rename;
@@ -333,7 +333,7 @@ static int atalk_unlink(struct vfs_handle_struct *handle,
}
}
- if (atalk_build_paths(talloc_tos(), handle-conn-origpath, path,
+ if (atalk_build_paths(talloc_tos(), handle-conn-cwd, path,
adbl_path, orig_path,
adbl_info, orig_info) != 0)
goto exit_unlink;
@@ -368,7 +368,7 @@ static int atalk_chmod(struct vfs_handle_struct *handle,
const char *path, mode_
if (!(ctx = talloc_init(chmod_file)))
return ret;
- if (atalk_build_paths(ctx, handle-conn-origpath, path, adbl_path,
+ if (atalk_build_paths(ctx, handle-conn-cwd, path, adbl_path,
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 9158423 VERSION: Bump version up to 4.1.0pre1 via 2050b48 VERSION: Release Samba 4.0.0rc1 via e75e768 WHATSNEW: prepare release notes for 4.0.0rc1 via e2accc4 build:dist: call source3/autogen.sh and packaged generated files via 6895875 build:dist: call build-manpages-nogit for make dist and package generated files via d28f36d build:dist: extend meaning of DIST_FILES to also recurse into directories via 36b2732 build:dist: make use of file / distfile more obvious in handling of DIST_FILES in make dist via 3821def build:dist: for snapshot builds, call DIST_DIRS with extend=True via 8ea2a46 build:dist: extend samba_dist.DIST_FILES() to take optional parameter extend(=False) via 4989a9d build:waf dist: factor out function to add list of files to the tarball via c33643e s3:build: rewrite autogen.sh to be called from any directory via b938979 release-scripts: run build-manpages-nogit with bash via 3c5d2d5 release-scripts: run build-manpages-git with bash via cfdab79 release-scripts: let build-manpages-nogit store generated docs under ./bin/docs via 068ae48 release-scripts: let build-manpages-git store generated docs under bin/docs/ from f5a2379 In vfs modules, don't use 'conn-origpath' when we really mean 'conn-cwd'. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 915842333e641190035c2911940f08870abd221f Author: Michael Adam ob...@samba.org Date: Wed Sep 12 15:34:29 2012 +0200 VERSION: Bump version up to 4.1.0pre1 Pair-Programmed-With: Stefan Metzmacher me...@samba.org Autobuild-User(master): Stefan Metzmacher me...@samba.org Autobuild-Date(master): Thu Sep 13 01:35:33 CEST 2012 on sn-devel-104 commit 2050b48dd4b05265e04029dbdfd9a22c2ccdb038 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 15:30:24 2012 +0200 VERSION: Release Samba 4.0.0rc1 Pair-Programmed-With: Stefan Metzmacher me...@samba.org commit e75e768f981d5766a098852dd5d100d496c6336b Author: Michael Adam ob...@samba.org Date: Wed Sep 12 15:27:48 2012 +0200 WHATSNEW: prepare release notes for 4.0.0rc1 Pair-Programmed-With: Stefan Metzmacher me...@samba.org commit e2accc4ef8c274eea09304d6f9211e3d5af3f73c Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:11:28 2012 +0200 build:dist: call source3/autogen.sh and packaged generated files Signed-off-by: Stefan Metzmacher me...@samba.org commit 6895875bf80df7f321a5853b591ba5b5a8d4f4d6 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:10:31 2012 +0200 build:dist: call build-manpages-nogit for make dist and package generated files so that we always have generated manpages under docs/manpages in the release tarball Signed-off-by: Stefan Metzmacher me...@samba.org commit d28f36d16e515fb1280b21b04bb5bb113647f247 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:06:23 2012 +0200 build:dist: extend meaning of DIST_FILES to also recurse into directories Pair-Programmed-With: Stefan Metzmacher me...@samba.org commit 36b2732426c4301bdbea99bb34fccdd767af044d Author: Michael Adam ob...@samba.org Date: Wed Sep 12 23:45:50 2012 +0200 build:dist: make use of file / distfile more obvious in handling of DIST_FILES in make dist Signed-off-by: Stefan Metzmacher me...@samba.org commit 3821defe2a76663ddef59e9591dffa42a08764bf Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:04:50 2012 +0200 build:dist: for snapshot builds, call DIST_DIRS with extend=True to allow the distversion file to be an addition to the list Signed-off-by: Stefan Metzmacher me...@samba.org commit 8ea2a468c38d07c62d094e2bd4c1dc42f9c47949 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:02:39 2012 +0200 build:dist: extend samba_dist.DIST_FILES() to take optional parameter extend(=False) This allows to do multpile DIST_FILES() calls that will extend the list rather than only setting it initially. Signed-off-by: Stefan Metzmacher me...@samba.org commit 4989a9dd7c89e446e59e9faf7cbe4a9a6b0083a8 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:01:40 2012 +0200 build:waf dist: factor out function to add list of files to the tarball Pair-Programmed-With: Stefan Metzmacher me...@samba.org commit c33643ebb354637f8651c5356b8e7445f0931ce8 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:48:12 2012 +0200 s3:build: rewrite autogen.sh to be called from any directory Signed-off-by: Stefan Metzmacher me...@samba.org commit b9389798314bc1163be7ea8fc89823c2666ecd78 Author: Michael Adam ob...@samba.org Date: Wed Sep 12 17:38:04 2012 +0200 release-scripts: run build-manpages-nogit with bash On debian/ubuntu, the
