Re: [Samba] Samba + Win7
Nothing like writing to the list to get some help, to find the solution on his own Win7 was prepared for samba NT4 style domain (registry modified), and samba was running happy. I guess somewhat, somewhere, somehow got stuck in the server. There was nothing in the logs, so I decided to reboot. And voila, the domain is available to win7 and can be connected to. Thanks anyway for the patience. Dominique On 18/09/2012 19:20, Dominique wrote: Hi list, I was successfully running samba 3 with windows 7 and ldap. Due to the limited number of users, I decided to remove LDAP and stick to tdbsam. That went well. That is, until I went through a series of Win7 update on a new machine I wanted to add to the domain. Now win7 does not accept the domain, and only ask to join an Active Directory Domain No change on the samba side, but it seems win7 is no longer looking for NT4 type domain... Any ideas ? Thanks, Dominique -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Error message about lock database
Hi, I'm running samba on a fully updated CentOS-6.3 box as a fileserver exporting to Win7 clients. samba-3.5.10-125.el6.x86_64 Anybody got an idea what is causing the following error message. It's filling up my logs. [2012/09/19 11:40:20.710031, 1] smbd/server.c:267(remove_child_pid) Scheduled cleanup of brl and lock database after unclean shutdown [2012/09/19 11:40:40.729746, 1] smbd/server.c:240(cleanup_timeout_fn) Cleaning up brl and lock database after unclean shutdown This is only seen on CentOS-6.3 a replacement server for CentOS-5.8 an not on another CentOS-5.8 box. It doesn't seem to affect samba working at least the students haven't complained ;-) Thanks, Tony -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba + Win7
On Tue, Sep 18, 2012 at 07:20:23PM +0200, Dominique wrote: Hi list, I was successfully running samba 3 with windows 7 and ldap. Please, which version of Samba 3? -- Marco Ciampa ++ | Linux User #78271 | | FSFE fellow #364 | ++ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba + Win7
Samba 3.4.7 (Ubuntu 10.04 LTS package) but for small setup it is not worth the hassle... On 19/09/2012 17:00, Marco Ciampa wrote: On Tue, Sep 18, 2012 at 07:20:23PM +0200, Dominique wrote: Hi list, I was successfully running samba 3 with windows 7 and ldap. Please, which version of Samba 3? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 4 and AD sites
I have several Samba 4 AD controllers set up at multiple sites. I set up sites and subnets. We have several /24's at each site, but each site is dedicated a /16, so I set up the Sites Subnets using the /16's. However, when I log into any system that is joined to the AD domain, it is using a DC at a different site. There doesn't seem to be any consistency to it, but it seems that the Sites Subnets are not working correctly. Does anyone have any suggestions on how I can troubleshoot this, or is this not working completely in Samba 4 yet? Thanks, Kris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 and AD sites
I have several Samba 4 AD controllers set up at multiple sites. I set up sites and subnets. We have several /24's at each site, but each site is dedicated a /16, so I set up the Sites Subnets using the /16's. However, when I log into any system that is joined to the AD domain, it is using a DC at a different site. There doesn't seem to be any consistency to it, but it seems that the Sites Subnets are not working correctly. Does anyone have any suggestions on how I can troubleshoot this, or is this not working completely in Samba 4 yet? Scratch this one, I found that my default site had to DC's in there that shouldn't have been. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 and AD sites
Scratch this one, I found that my default site had to DC's in there that shouldn't have been. … in DNS. Everything was set up correctly in Sites Subnets, so this one was kind of hidden buried in DNS. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.5.8 nmbd problems
Hi all, I got a problem with the name resolves with Samba 3.6.8 installed on a SLES11 x64 machine. The machine works as a domain master with the following configuration: --snip-- [global] workgroup = SAMBA netbios name = PDC server string = Sambaserver %v interfaces = bond0, lo socket options = TCP_NODELAY bind interfaces only = yes os level = 70 preferred master = yes domain master = yes domain logons = yes local master = yes wins support = yes name resolve order = wins lmhosts hosts bcast max protocol = SMB2 -- snap --- There are multiple clients (WinXP and Win7 Workstations) in different subnets. The samba server has the IP 192.168.1.79, the workstations are in subnet 192.168.1.0/24 and 192.168.7.0/24. If I try to resolve a NetBios name (locally logged in at the Sambaserver), nmblookup always tries to resolve via broadcasts. [root@samba3:/var/lib/samba]## nmblookup PC05 added interface bond0 ip=192.168.1.79 bcast=192.168.1.255 netmask=255.255.255.0 added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 added interface lo ip=127.0.0.2 bcast=127.255.255.255 netmask=255.0.0.0 Socket opened. querying PC05 on 192.168.1.255 querying PC05 on 127.255.255.255 querying PC05 on 127.255.255.255 name_query failed to find name PC05 If I use the the -R -U option to query the nmb directly I get a correct answer: [root@samba3:/var/lib/samba]## nmblookup -R -U 192.168.1.79 PC05 added interface bond0 ip=192.168.1.79 bcast=192.168.1.255 netmask=255.255.255.0 added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 added interface lo ip=127.0.0.2 bcast=127.255.255.255 netmask=255.0.0.0 Socket opened. querying PC05 on 192.168.1.79 Got a positive name query response from 192.168.1.79 ( 192.168.7.5 ) 192.168.7.5 PC0500 Shouldn´t the broadcast query be answered by the nmbd? Or am I wrong? Regards Florian Götz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba/LDAP appliance recommendation
Hi all, What's a good Samba+LDAP appliance these days for a small business? Currently I used a stock Ubuntu server and did all Samda/LDAP configuration manually. I'm looking for something that can allow my regular staff to use as well. 1. I tried most of the popular NAS distros, like FreeNAS, NAS4Free, OpenmediaVault, etc. Most of these NAS don't have an LDAP server built-in 2. I tried Openfiler, ClearOS and Zentyal which do have LDAP server built-in but I haven't gotten them to import my existing Samba/LDAP data yet. WIP. 3. I just discovered Artica NAS Appliance and Univention UCS, will be testing them this week. Do you guys know anything about these two distros? Sometimes I wonder if I even need LDAP, I migrated to LDAP before only to make it a little easier (though not by much) to edit samba account data (e.g. SID). I guess I'd like to have centralized authentication as well (clients include Windows, Mac OSX and Linux, maybe OpenVPN as well). Is there a simpler mode of centralized login operation? Or is LDAP the only viable solution? - Jeff -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] FW: Kerberos errors in samba4 domain using outlook and exchange
Exchange uses internal addressing when communicating with recipients within the same domain. I'm curious what version of Exchange is hosting? My guess is that there are multiple email address attached to the AD user and you're seeing the attempt to have it deliver as a local user. As Exchange is not local to your environment the email delivers via the SMTP address. Tim -Original Message- From: Caleb O'Connell [mailto:ca...@privacyassociation.org] Sent: Tuesday, September 18, 2012 6:48 AM To: samba@lists.samba.org Subject: [Samba] Kerberos errors in samba4 domain using outlook and exchange So, I have a Samba4 domain setup, which is working pretty well. Our windows 7 computers all have outlook connected to Exchange that is hosted elsewhere. This also works great. I keep getting in the samba log messages like: Kerberos: UNKNOWN -- username\@domain.com@SAMBA.DOMAIN: no such entry found in hdb so, basically, the username is the e-mail username, not the samba username, the domain.com is our e-mail domain and of course SAMBA.DOMAIN is our internal domain. It looks like outlook can sense it's on active directory and is broadcasting it's e-mail as username with e-mail domain. This doesn't seem to be causing any problems, but I'd like to not have this. This is probably more a windows issue, but if someone is an active directory/windows auth guru, maybe there is some setting I can work with? I couldn't find anything searching google, this is probably a unique problem only people with a setup like mine would experience. Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-09-19-1240/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2012-09-19-1240/samba3.stderr http://git.samba.org/autobuild.flakey/2012-09-19-1240/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2012-09-19-1240/samba.stderr http://git.samba.org/autobuild.flakey/2012-09-19-1240/samba.stdout The top commit at the time of the failure was: commit f6e33eb890dbe4451d3b3ff52a2f38d3a5ceb8c8 Author: Volker Lendecke v...@samba.org Date: Tue Sep 18 14:35:39 2012 -0700 s3: Use SBVAL in put_long_date_timespec Autobuild-User(master): Volker Lendecke v...@samba.org Autobuild-Date(master): Wed Sep 19 01:16:25 CEST 2012 on sn-devel-104
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 98d90c0 pam_winbind: match more return codes when wbcGetPwnam has failed. from f6e33eb s3: Use SBVAL in put_long_date_timespec http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 98d90c02f0961d173bebb9901c7ad0819827f96e Author: Günther Deschner g...@samba.org Date: Wed Sep 19 10:59:50 2012 +0200 pam_winbind: match more return codes when wbcGetPwnam has failed. This is required to properly return PAM_USER_UNKNOWN in case winbind had a problem. Guenther Autobuild-User(master): Günther Deschner g...@samba.org Autobuild-Date(master): Wed Sep 19 15:06:10 CEST 2012 on sn-devel-104 --- Summary of changes: nsswitch/pam_winbind.c |3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/nsswitch/pam_winbind.c b/nsswitch/pam_winbind.c index fb84985..83d7bb6 100644 --- a/nsswitch/pam_winbind.c +++ b/nsswitch/pam_winbind.c @@ -2064,6 +2064,9 @@ static int valid_user(struct pwb_context *ctx, switch (wbc_status) { case WBC_ERR_UNKNOWN_USER: + /* match other insane libwbclient return codes */ + case WBC_ERR_WINBIND_NOT_AVAILABLE: + case WBC_ERR_DOMAIN_NOT_FOUND: return 1; case WBC_ERR_SUCCESS: return 0; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via f43498b selftest: we currently fail smb2.durable-v2-open.app-instance via 1c2f1a1 s4:torture:smb2: add a new test durable-v2-open.app-instance via a397c85 s4:libci: add a SMB2_CREATE_APP_INSTANCE_ID blob to the request if the in.app_instance_id is present via 562719f s4:libcli: add a app_instance_id member to the smb2_create input struct via 50c10cb libcli: add a define for the APP_INSTANCE_ID smb2 create context via e6c600a s4:torture/smb2: improve the smb2.create.blob test via aa5caf1 libcli/smb: fix padding in smb2_create_blob* from 98d90c0 pam_winbind: match more return codes when wbcGetPwnam has failed. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit f43498b7590e33f2c8939c4f04781068674335af Author: Michael Adam ob...@samba.org Date: Fri Sep 7 16:42:37 2012 +0200 selftest: we currently fail smb2.durable-v2-open.app-instance Autobuild-User(master): Stefan Metzmacher me...@samba.org Autobuild-Date(master): Wed Sep 19 23:05:43 CEST 2012 on sn-devel-104 commit 1c2f1a18623c9092fda6cb74788c17fc572e5791 Author: Michael Adam ob...@samba.org Date: Fri Sep 7 14:30:07 2012 +0200 s4:torture:smb2: add a new test durable-v2-open.app-instance Pair-Programmed-With: Stefan Metzmacher me...@samba.org commit a397c8516467b83d7e2cb5b4a15dea26798786d5 Author: Michael Adam ob...@samba.org Date: Fri Sep 7 12:06:36 2012 +0200 s4:libci: add a SMB2_CREATE_APP_INSTANCE_ID blob to the request if the in.app_instance_id is present commit 562719f75f9868d13f4838b36cc263ef5d3541b1 Author: Michael Adam ob...@samba.org Date: Fri Sep 7 12:06:05 2012 +0200 s4:libcli: add a app_instance_id member to the smb2_create input struct commit 50c10cbdcedc892e07297686dbe380cfb3f94cef Author: Michael Adam ob...@samba.org Date: Fri Sep 7 12:05:24 2012 +0200 libcli: add a define for the APP_INSTANCE_ID smb2 create context commit e6c600aa2c751e694917322378417816c3e58eb6 Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 19 21:18:46 2012 +0200 s4:torture/smb2: improve the smb2.create.blob test metze commit aa5caf1fe92b159eae00c7b11499e9ec697cf9ae Author: Stefan Metzmacher me...@samba.org Date: Wed Sep 19 08:11:23 2012 +0200 libcli/smb: fix padding in smb2_create_blob* metze --- Summary of changes: libcli/smb/smb2_constants.h|1 + libcli/smb/smb2_create_blob.c | 41 +++--- selftest/knownfail |1 + source4/libcli/raw/interfaces.h|4 +- source4/libcli/smb2/create.c | 25 ++ source4/torture/smb2/create.c | 93 +- source4/torture/smb2/durable_v2_open.c | 134 7 files changed, 285 insertions(+), 14 deletions(-) Changeset truncated at 500 lines: diff --git a/libcli/smb/smb2_constants.h b/libcli/smb/smb2_constants.h index 6b9ad85..22fe23a 100644 --- a/libcli/smb/smb2_constants.h +++ b/libcli/smb/smb2_constants.h @@ -204,6 +204,7 @@ #define SMB2_CREATE_TAG_RQLS RqLs #define SMB2_CREATE_TAG_DH2Q DH2Q #define SMB2_CREATE_TAG_DH2C DH2C +#define SMB2_CREATE_TAG_APP_INSTANCE_ID \x45\xBC\xA6\x6A\xEF\xA7\xF7\x4A\x90\x08\xFA\x46\x2E\x14\x4D\x74 /* SMB2 notify flags */ #define SMB2_WATCH_TREE 0x0001 diff --git a/libcli/smb/smb2_create_blob.c b/libcli/smb/smb2_create_blob.c index 2175a0c..189bcd1 100644 --- a/libcli/smb/smb2_create_blob.c +++ b/libcli/smb/smb2_create_blob.c @@ -61,10 +61,10 @@ NTSTATUS smb2_create_blob_parse(TALLOC_CTX *mem_ctx, const DATA_BLOB buffer, if ((next 0x7) != 0 || next remaining || - name_offset 16 || - name_offset remaining || - name_length != 4 || /* windows enforces this */ + name_offset != 16 || + name_length 4 || name_offset + name_length remaining || + (data_offset 0x7) != 0 || (data_offset (data_offset name_offset + name_length)) || (data_offset (data_offset remaining)) || (data_offset data_length @@ -108,25 +108,44 @@ static NTSTATUS smb2_create_blob_push_one(TALLOC_CTX *mem_ctx, DATA_BLOB *buffer { uint32_t ofs = buffer-length; size_t tag_length = strlen(blob-tag); - uint8_t pad = smb2_create_blob_padding(blob-data.length+tag_length, 4); + size_t blob_offset = 0; + size_t blob_pad = 0; + size_t next_offset = 0; + size_t next_pad = 0; + bool ok; + + blob_offset = 0x14 + tag_length; + blob_pad = smb2_create_blob_padding(blob_offset, 8); + next_offset = blob_offset + blob_pad + blob-data.length; + if
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 03055af s3: Fix idmap_hash from f43498b selftest: we currently fail smb2.durable-v2-open.app-instance http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 03055af9b2af8a5a1c23946369a21d6437cf1b8c Author: Volker Lendecke v...@samba.org Date: Tue Sep 18 15:31:26 2012 -0700 s3: Fix idmap_hash Calling be_init with NULL safely crashes, because we dereference NULL. We don't need to call it here, this is called in all workers anyway. Thanks to Jiri Sasek jiri.sa...@oracle.com for finding this. Autobuild-User(master): Volker Lendecke v...@samba.org Autobuild-Date(master): Thu Sep 20 05:03:54 CEST 2012 on sn-devel-104 --- Summary of changes: source3/winbindd/idmap_hash/idmap_hash.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/winbindd/idmap_hash/idmap_hash.c b/source3/winbindd/idmap_hash/idmap_hash.c index cb518a8..bff1e9e 100644 --- a/source3/winbindd/idmap_hash/idmap_hash.c +++ b/source3/winbindd/idmap_hash/idmap_hash.c @@ -259,7 +259,7 @@ done: static NTSTATUS nss_hash_init(struct nss_domain_entry *e ) { - return be_init(NULL); + return NT_STATUS_OK; } /** -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via bc77745 s3:smb2_server: fix usage of invalid memory in smb2_signing_check_pdu() via 38994f6 s3:winbind:idmap_tdb_common: improve readability of assignment by adding an if via d1de2b4 s3:winbind:idmap_tdb_common: improve readability of assignment by adding an if from 03055af s3: Fix idmap_hash http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit bc77745cfaf502e24575dab9ae323643d94760e3 Author: Stefan Metzmacher me...@samba.org Date: Thu Sep 20 00:42:02 2012 +0200 s3:smb2_server: fix usage of invalid memory in smb2_signing_check_pdu() metze Autobuild-User(master): Stefan Metzmacher me...@samba.org Autobuild-Date(master): Thu Sep 20 07:18:31 CEST 2012 on sn-devel-104 commit 38994f6ff34316ad08961f62a1f57429f7968e70 Author: Michael Adam ob...@samba.org Date: Wed Sep 19 02:57:37 2012 +0200 s3:winbind:idmap_tdb_common: improve readability of assignment by adding an if in idmap_tdb_common_sids_to_unixids() commit d1de2b4d3999dda96df9156da30a239af3b2b88e Author: Michael Adam ob...@samba.org Date: Wed Sep 19 02:57:37 2012 +0200 s3:winbind:idmap_tdb_common: improve readability of assignment by adding an if in idmap_tdb_common_unixids_to_sids() --- Summary of changes: source3/smbd/smb2_server.c |2 +- source3/winbindd/idmap_tdb_common.c | 16 ++-- 2 files changed, 11 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c index be7997f..fd90b2f 100644 --- a/source3/smbd/smb2_server.c +++ b/source3/smbd/smb2_server.c @@ -2017,7 +2017,7 @@ NTSTATUS smbd_smb2_request_dispatch(struct smbd_smb2_request *req) status = smb2_signing_check_pdu(signing_key, conn-protocol, SMBD_SMB2_IN_HDR_IOV(req), - SMBD_SMB2_NUM_IOV_PER_REQ); + SMBD_SMB2_NUM_IOV_PER_REQ - 1); if (!NT_STATUS_IS_OK(status)) { return smbd_smb2_request_error(req, status); } diff --git a/source3/winbindd/idmap_tdb_common.c b/source3/winbindd/idmap_tdb_common.c index 2b16d0b..5713fe2 100644 --- a/source3/winbindd/idmap_tdb_common.c +++ b/source3/winbindd/idmap_tdb_common.c @@ -320,9 +320,11 @@ NTSTATUS idmap_tdb_common_unixids_to_sids(struct idmap_domain * dom, talloc_get_type_abort(dom-private_data, struct idmap_tdb_common_context); - unixid_to_sid_fn = - (ctx-unixid_to_sid_fn == -NULL) ? idmap_tdb_common_unixid_to_sid : ctx-unixid_to_sid_fn; + if (ctx-unixid_to_sid_fn == NULL) { + unixid_to_sid_fn = idmap_tdb_common_unixid_to_sid; + } else { + unixid_to_sid_fn = ctx-unixid_to_sid_fn; + } /* initialize the status to avoid surprise */ for (i = 0; ids[i]; i++) { @@ -636,9 +638,11 @@ NTSTATUS idmap_tdb_common_sids_to_unixids(struct idmap_domain * dom, state.dom = dom; state.ids = ids; state.allocate_unmapped = false; - state.sid_to_unixid_fn = - (ctx-sid_to_unixid_fn == -NULL) ? idmap_tdb_common_sid_to_unixid : ctx-sid_to_unixid_fn; + if (ctx-sid_to_unixid_fn == NULL) { + state.sid_to_unixid_fn = idmap_tdb_common_sid_to_unixid; + } else { + state.sid_to_unixid_fn = ctx-sid_to_unixid_fn; + } ret = idmap_tdb_common_sids_to_unixids_action(ctx-db, state); -- Samba Shared Repository