Re: [Samba] samba4 + cups - it is working for someone?
On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I think. There is no entries in cups logs only issue in samba logs Hi I just found my eror. i hope it's the same for you: Here is my smb.conf: [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes [hpdeskjetf2200series] path = /var/spool/samba/ browseable = yes printable = yes printer name = hpdeskjetf2200series #printer name = HP Deskjet F2200 series Note the printer name lines. I had the windows name HP Deskjet F2200 series The clue was in the logs: /usr/local/samba/sbin/smbd: Unable to get jobs for ipp://localhost/printers/HP Deskjet F2200 series - client-error-not-found I changed to the Linux/cups printer name and print jobs got sent without error. HTH Steve Steve, still not working for me. What is the output of lpinfo -v on your system? Gerry Hi Gerry lpinfo -v network http network ipp network ipps network https direct usb://HP/Deskjet%20F2200%20series?serial=CN8BO1S0S605CC network socket network lpd direct hp:/usb/Deskjet_F2200_series?serial=CN8BO1S0S605CC network smb direct parallel:/dev/lp0 network beh direct hpfax I wonder if you have the cups dev libraries and headers installed before you compile. I didn't so that was another problem I had. On openSUSE it's cups-devel. Just to make sure, I built with ./configure --enable-cups Suerte, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Folder permissions not working
On 07/06/13 08:13, Mike Bryce wrote: I seem to be having a bit of a brain fade with regard to permissions in samba. I have a share with several folders owned by different groups: drwxrws--- 13 root accounts 4.0K Jun 7 12:12 Accounts drwxrws--- 16 ian accounts 4.0K Jun 7 11:24 Administration drwxrws--- 14 accounts users4.0K Apr 22 12:05 Downloads drwxrwsr-x 7 ian users4.0K Mar 22 13:51 Graphics drwxrws--- 14 marion admins 4.0K Jun 6 14:39 Ian Marion drwxrws--- 5 ian myob 4.0K Jun 5 12:02 MYOB Accounts drwxrws--- 41 ian users4.0K Jun 4 16:03 Plant Health drwxrwsr-x 8 ian users4.0K Jan 8 07:49 Research drwxrws--- 12 ian users4.0K Apr 16 16:57 Staff drwxrws--- 21 ldapuser coffeecentre 4.0K Jun 5 13:32 The Australian Coffee Centre I have a user (marion) who is a member of all these groups and more: # groups marion admins users coffeecentre accounts domadmins domusers myob The issue is, Marion can't access the folder called The Australian Coffee Centre, Windows 7 says no permission and the samba server shows: # tail /var/log/samba/log.marionhome-pc [2013/06/07 08:28:31.144321, 1] smbd/service.c:805(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED [2013/06/07 08:28:31.240024, 1] smbd/service.c:805(make_connection_snum) create_connection_session_info failed: NT_STATUS_ACCESS_DENIED All other sub-folders in this folder are accessible as expected. Where do I need to go looking for this problem? Anyone struck this before? Happy to provide further info as directed. Hi I'm no expert, but how about using a big hammer? Backup first, then: setfacl -Rm u:marion:rwx The Australian Coffee Centre Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 Packages Available for Download
On 2013-05-23 at 23:12 +0200 Chris Fischer sent off: will it later be possible to use samba4 packages from the distribution when released, as distribution maintained packages mostly have less dependency problems or Sernet decides to stop providing binary packages. SerNet provides binary packages much longer than your distributor does. You can still get latest 3.6 samba packages for sles8 and rhel4 for example. Or is the internal structure a bit proprietary and the decision to use your packages not reversibel. the package structure is logical, if you thing there something can be improved, drop us a mail to sa...@sernet.de. It's also not true that installing the packages is not reversibel. You can always uninstall the packages again and install the distributor packages again in case that the package manager of your distribution can not handle package conflict resolution right. Again, if you have issues with that, feel free to contact us directly. Cheers Björn -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen ☎ +49-551-37-0, ℻ +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba says domain not available in debian squeeze
Hi I continue with problems using my samba +openldap. At now I was discovering one problem more, because I separated samba and ldap in two separated servers and not was SRV registers in my bind. Now I continue with domain not available, using wizard in windows XP platform, I can register correctly my client in ldap but not connects to current profiles and I can't generate new profiles. I was checking bind, openldap and samba config, but I don't know where can be the problem and I'm starts to be critical. * *[global] workgroup = DOM netbios name = DOM-PDC security = user interfaces = eth0 127.0.0.0/8 10.0.0.0/24 10.0.1.0/24 10.0.4.0/24 10.0.8.0/22 server string = DOM Primary Domain Controller encrypt passwords = true unix password sync = no ldap passwd sync = yes passwd program = /usr/bin/smbldap-passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . log level = 2 syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 time server = yes mangling method = hash2 Dos charset = 850 Unix charset = UTF-8 domain logons = yes domain master = yes logon path = logon drive = logon home = logon script = logon.bat local master = yes preferred master = yes os level = 65 wins support = yes dns proxy = yes panic action = /usr/share/samba/panic-action %d server signing = auto server schannel = auto winbind trusted domains only = yes winbind use default domain = yes passdb backend = ldapsam:ldap://10.0.0.11/; idmap config * : backend = ldap://10.0.0.11/ ldap admin dn = cn=admin,dc=DOM,dc=es ldap suffix = dc=DOM,dc=es ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Computers ldap idmap suffix = ou=Idmap ldap ssl = no ldap delete dn = yes add user script = /usr/sbin/smbldap-useradd -m %u delete user script = /usr/sbin/smbldap-userdel %u add machine script = /usr/sbin/smbldap-useradd -w %u add group script = /usr/sbin/smbldap-groupadd -p %g delete group script = /usr/sbin/smbldap-groupdel %g add user to group script = /usr/sbin/smbldap-groupmod -m %u %g delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g set primary group script = /usr/sbin/smbldap-usermod -g %g %u # smb ports = 139 load printers = yes create mask = 0774 directory mask = 0775 nt acl support = no printing = cups printcap name = cups deadtime = 60 keepalive = 300 guest account = nobody map to guest = bad user dont descend = /proc,/dev,/etc,/lib,/lost+found show add printer wizard = yes preserve case = yes short preserve case = yes case sensitive = no usershare allow guests = yes debug timestamp = Yes debug prefix timestamp = Yes debug hires timestamp = Yes debug pid = Yes debug uid = Yes debug class = Yes ldap debug level = 5 ldap debug threshold = 10 [netlogon] # comment = Network Logon Service path = /var/lib/samba/netlogon # admin users = root # guest ok = yes read only = yes browseable = no Any test to do or idea why the message is RPC not responding? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba failing irregularly ('Access is denied' in Windows), restarting smbd 'works'
Hi all, I have been a happy samba user for a few months now. Since last week I have been a less happy user, however. I am hoping you can help. I probably need some directions on debugging/log viewing. I have a samba 3.5.10 server which works fine most of the time (on my Centos 6.3 machine). Windows (2008 R2) users are using network drives from this server. I set up winbind which seems to work. Problems started to happen when I deleted the winbind_idmap file. Somewhere on a list I saw this was perfectly fine to do. The idmap did rebuild, but the group-id mismatched (I think someone deleted a user account on the ad server). I then fixed the group IDs of the files and everything is working again. The problem I am having is windows boxes telling me [sharename] is not accessible - Access is denied. I don't know how to find the source of this problem. I set log level = 2 winbind:3 auth:3, but I don't know what to look for. When this problem occurs, I currently restart smbd and things work again. Can someone push me in the right direction? Thanks, kl -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba + LDAP: Issue adding machine.
Greetings. I've run into a trouble when trying to add a new Win7 machine on a domain. The domain is controlled by a server running Samba + LDAP (samba compiled with ldap support), on a Debian 5 OS at the local network. I've added the machine name to the LDAP three through phpldapadmin using the option Samba3 Machine on the related submenu and via terminal on samba. Then I renamed the new machine to match the computer name and tried to add it to the domain. When prompted for credentials to add the new machine I've informed the admin login and password and hit enter. The windows then returned the following error (something like): The junction operation was not well succeded. Maybe another existent machine account machine_account_name was created previously using anothet set of credentials. User another computer name or contact the admin to remove any obsolete conflicting account. Error: Access denied. Any ideas for the troubleshoot will be welcome. -- Att.* *** Luis H. Forchesatto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba4 errors
Hello, We've been using samba v4 for a while, but recently we faced two problems for which we cannot determine the source - nor the solution: - every day samba4 stops authenticating new users and sharing folders. While previous logged users can access resources and services, users that weren't logged can't log in. It happens either from kerberos or directly from LDAP. - We are forwarding all DNS requests to the internal DNS server in samba. When samba it's restarted, our main DNS server must be restarted too as it cannot forward new queries to the samba server - howerver, both reply to requests if queried individually. We have tried to update from 4.0.5 to 4.0.6, and to downgrade it as it wasn't working either. Logs don't show anything that we can identify as an error/misconfiguration - and samba main log file remains with extension %m, it does not get expanded; while client's log file end with the IP/hostname of the machine. What steps can we perform to identify the root of the problem? Is there a particular string in the log files that can help? PS: if necessary, we can upload a log file sample and the samba configuration. Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba + LDAP: Issue adding machine.
I found that Samba 3.5.x has trouble creating the LDAP attributes correctly on new machine accounts . I think Samba 3.4.x was OK. Rejoining a machine to a domain was usually OK. You need may need to do a mix of account creation with smbpasswd and LDAP modification with the LDAP editor. It appears to incorrectly set sambaAccountFlags as [U] (user) instead of [W] (workstation). When attempting to join a machine to the domain you may get an error that the account already exists. Use an LDAP editor to make sure sambaAccountFlags is set to [W]. (You can used pbedit to verify the setting but not to change it to [W].) type: sambaAccountFlags value: [W ] If, when joining a domain, you get an error that the the specified network password is not correct. you may need to precreate the samba account attribues with the pdbedit or smbpasswd commands .Try the following on spooky #smbpasswd -x -m machinename #smbpasswd -a -m machinename You MAY also need to make sure that the sambaPrimaryGroupSID is also set. It should end with 515. type: sambaPrimaryGroupSID value:S-1-5-21-xxx-xxx-xxx-515 On 06/10/13 08:33, Luis H. Forchesatto wrote: Greetings. I've run into a trouble when trying to add a new Win7 machine on a domain. The domain is controlled by a server running Samba + LDAP (samba compiled with ldap support), on a Debian 5 OS at the local network. I've added the machine name to the LDAP three through phpldapadmin using the option Samba3 Machine on the related submenu and via terminal on samba. Then I renamed the new machine to match the computer name and tried to add it to the domain. When prompted for credentials to add the new machine I've informed the admin login and password and hit enter. The windows then returned the following error (something like): The junction operation was not well succeded. Maybe another existent machine account machine_account_name was created previously using anothet set of credentials. User another computer name or contact the admin to remove any obsolete conflicting account. Error: Access denied. Any ideas for the troubleshoot will be welcome. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba4 + cups - it is working for someone?
On 06/10/2013 03:47 AM, steve wrote: On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I think. There is no entries in cups logs only issue in samba logs Hi I just found my eror. i hope it's the same for you: Here is my smb.conf: [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes [hpdeskjetf2200series] path = /var/spool/samba/ browseable = yes printable = yes printer name = hpdeskjetf2200series #printer name = HP Deskjet F2200 series Note the printer name lines. I had the windows name HP Deskjet F2200 series The clue was in the logs: /usr/local/samba/sbin/smbd: Unable to get jobs for ipp://localhost/printers/HP Deskjet F2200 series - client-error-not-found I changed to the Linux/cups printer name and print jobs got sent without error. HTH Steve Steve, still not working for me. What is the output of lpinfo -v on your system? Gerry Hi Gerry lpinfo -v network http network ipp network ipps network https direct usb://HP/Deskjet%20F2200%20series?serial=CN8BO1S0S605CC network socket network lpd direct hp:/usb/Deskjet_F2200_series?serial=CN8BO1S0S605CC network smb direct parallel:/dev/lp0 network beh direct hpfax I wonder if you have the cups dev libraries and headers installed before you compile. I didn't so that was another problem I had. On openSUSE it's cups-devel. Just to make sure, I built with ./configure --enable-cups Suerte, Steve Ok, here's lpinfo -v on my test system: # lpinfo -v network ipp network lpd file cups-pdf:/ network socket direct scsi network https network http network socket://192.168.2.180 The last entry is a networked printer I notice that network smb is missing. Going to CH10 in the Samba manual I see that it takes a symlink from smbspool. Did you have to do that manually? Or did it just get made during install? Gerry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba4 + cups - it is working for someone?
On Mon, 2013-06-10 at 09:54 -0400, Gerry Reno wrote: On 06/10/2013 03:47 AM, steve wrote: On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I think. There is no entries in cups logs only issue in samba logs Hi I just found my eror. i hope it's the same for you: Here is my smb.conf: [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes [hpdeskjetf2200series] path = /var/spool/samba/ browseable = yes printable = yes printer name = hpdeskjetf2200series #printer name = HP Deskjet F2200 series Note the printer name lines. I had the windows name HP Deskjet F2200 series The clue was in the logs: /usr/local/samba/sbin/smbd: Unable to get jobs for ipp://localhost/printers/HP Deskjet F2200 series - client-error-not-found I changed to the Linux/cups printer name and print jobs got sent without error. HTH Steve Steve, still not working for me. What is the output of lpinfo -v on your system? Gerry Hi Gerry lpinfo -v network http network ipp network ipps network https direct usb://HP/Deskjet%20F2200%20series?serial=CN8BO1S0S605CC network socket network lpd direct hp:/usb/Deskjet_F2200_series?serial=CN8BO1S0S605CC network smb direct parallel:/dev/lp0 network beh direct hpfax I wonder if you have the cups dev libraries and headers installed before you compile. I didn't so that was another problem I had. On openSUSE it's cups-devel. Just to make sure, I built with ./configure --enable-cups Suerte, Steve Ok, here's lpinfo -v on my test system: # lpinfo -v network ipp network lpd file cups-pdf:/ network socket direct scsi network https network http network socket://192.168.2.180 The last entry is a networked printer I notice that network smb is missing. Going to CH10 in the Samba manual I see that it takes a symlink from smbspool. Did you have to do that manually? Or did it just get made during install? Gerry Hi No idea about the symlink until you mentioned it so it must have been made during the install. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4.0.6 Ubuntu Package Available
Andrew- After git-building the package with your debian directory (as it was at about 9:00 AM UTC-0600), I installed it and started comparing it to the package I had crafted. There are a large number of differences, but almost all of them seem to stem from the work-arounds I implemented to cope with my lack of knowledge in package crafting. For instance, with the samba4_4.0.3+dfsg1-0.1 debian that we started with, certain variables and paths were not expanding properly which led to build failures; I remedied this problem by changing the install paths and associated rules. It was barbaric methodology, but it did eventually pan out. Other than that though, our packages seem to both function (though one morning of light usage is not a fair trial); though I'm glad to have a proper install thanks to the git tree you linked. One difference though that will matter is that wafsamba.py does not properly expand python as an environment variable when it preforms substitution on the interpreter line for samba_dnsupdate, samba_kcc, samba_spnupdate and samba_upgradedns. The interpreter line as is, will read #!/usr/bin/python2.7# vim: expandtab which causes the 'bad interpreter' error when invoked. Changing wafsamba.py as follows seems to fix the issue: if task.env[PYTHON][0] == /: - replacement_shebang = #!%s % task.env[PYTHON] + replacement_shebang = #!%s\n % task.env[PYTHON] else: - replacement_shebang = #!/usr/bin/env %s % task.env[PYTHON] + replacement_shebang = #!/usr/bin/env %s\n % task.env[PYTHON] I'm rebuilding the package I made available previously with the up-to-date debian folder as well as that newline fix and my unofficial exclude ip patch. Thanks much for the help, Mike Ray -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba4 + cups - it is working for someone?
On 06/10/2013 12:16 PM, steve wrote: On Mon, 2013-06-10 at 09:54 -0400, Gerry Reno wrote: On 06/10/2013 03:47 AM, steve wrote: On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I think. There is no entries in cups logs only issue in samba logs Hi I just found my eror. i hope it's the same for you: Here is my smb.conf: [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes [hpdeskjetf2200series] path = /var/spool/samba/ browseable = yes printable = yes printer name = hpdeskjetf2200series #printer name = HP Deskjet F2200 series Note the printer name lines. I had the windows name HP Deskjet F2200 series The clue was in the logs: /usr/local/samba/sbin/smbd: Unable to get jobs for ipp://localhost/printers/HP Deskjet F2200 series - client-error-not-found I changed to the Linux/cups printer name and print jobs got sent without error. HTH Steve Steve, still not working for me. What is the output of lpinfo -v on your system? Gerry Hi Gerry lpinfo -v network http network ipp network ipps network https direct usb://HP/Deskjet%20F2200%20series?serial=CN8BO1S0S605CC network socket network lpd direct hp:/usb/Deskjet_F2200_series?serial=CN8BO1S0S605CC network smb direct parallel:/dev/lp0 network beh direct hpfax I wonder if you have the cups dev libraries and headers installed before you compile. I didn't so that was another problem I had. On openSUSE it's cups-devel. Just to make sure, I built with ./configure --enable-cups Suerte, Steve Ok, here's lpinfo -v on my test system: # lpinfo -v network ipp network lpd file cups-pdf:/ network socket direct scsi network https network http network socket://192.168.2.180 The last entry is a networked printer I notice that network smb is missing. Going to CH10 in the Samba manual I see that it takes a symlink from smbspool. Did you have to do that manually? Or did it just get made during install? Gerry Hi No idea about the symlink until you mentioned it so it must have been made during the install. I don't understand then why my Samba git stable (4.0.6) install doesn't have this symlink. $ find . -name config.h ./source4/heimdal_build/config.h ./bin/default/include/config.h Is there some configure switch that causes this to be generated? Gerry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba4 + cups - it is working for someone?
On Mon, 2013-06-10 at 12:40 -0400, Gerry Reno wrote: On 06/10/2013 12:16 PM, steve wrote: On Mon, 2013-06-10 at 09:54 -0400, Gerry Reno wrote: On 06/10/2013 03:47 AM, steve wrote: On 09/06/13 20:16, Gerry Reno wrote: On 06/09/2013 06:45 AM, steve wrote: On 09/06/13 11:00, Adam Sienkiewicz wrote: Hi Steve I procceeded regarding this howtu. All seems to be fine except connection samba-cups. From windows I can add printer, print test page but all print jobs from samba are lost between samba and cups I think. There is no entries in cups logs only issue in samba logs Hi I just found my eror. i hope it's the same for you: Here is my smb.conf: [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes [hpdeskjetf2200series] path = /var/spool/samba/ browseable = yes printable = yes printer name = hpdeskjetf2200series #printer name = HP Deskjet F2200 series Note the printer name lines. I had the windows name HP Deskjet F2200 series The clue was in the logs: /usr/local/samba/sbin/smbd: Unable to get jobs for ipp://localhost/printers/HP Deskjet F2200 series - client-error-not-found I changed to the Linux/cups printer name and print jobs got sent without error. HTH Steve Steve, still not working for me. What is the output of lpinfo -v on your system? Gerry Hi Gerry lpinfo -v network http network ipp network ipps network https direct usb://HP/Deskjet%20F2200%20series?serial=CN8BO1S0S605CC network socket network lpd direct hp:/usb/Deskjet_F2200_series?serial=CN8BO1S0S605CC network smb direct parallel:/dev/lp0 network beh direct hpfax I wonder if you have the cups dev libraries and headers installed before you compile. I didn't so that was another problem I had. On openSUSE it's cups-devel. Just to make sure, I built with ./configure --enable-cups Suerte, Steve Ok, here's lpinfo -v on my test system: # lpinfo -v network ipp network lpd file cups-pdf:/ network socket direct scsi network https network http network socket://192.168.2.180 The last entry is a networked printer I notice that network smb is missing. Going to CH10 in the Samba manual I see that it takes a symlink from smbspool. Did you have to do that manually? Or did it just get made during install? Gerry Hi No idea about the symlink until you mentioned it so it must have been made during the install. I don't understand then why my Samba git stable (4.0.6) install doesn't have this symlink. $ find . -name config.h ./source4/heimdal_build/config.h ./bin/default/include/config.h Is there some configure switch that causes this to be generated? Gerry Hi I couldn't get it to work with 4.0.6. We have: Version 4.1.0pre1-GIT-56055f7 It's the one you get from here: git://git.samba.org/samba.git -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Cross Compiling Samba 4.0.6 for ARM increases size of binaries
Thanks Andrew for the reply. Do we have a TODO list need to support cross compilation using the waf build system? I can try and hack around the build system. The WAF build system generates a cache file (default.cache.py) which has all the variables needed to configure the waf system. Is it possible to modify or inject our own variables by modifying the file and ensuring the waf uses the cached values? Also can we expose more variables need for cross-compilation via a 'cross-answers' file? What would be a good approach to resolve this; I can perform some experiments and upload the code to be reviewed if all works well. -Pranav On Wed, Jun 5, 2013 at 6:42 AM, Andrew Bartlett abart...@samba.org wrote: On Fri, 2013-05-31 at 11:05 -0700, pranav desai wrote: Hi, I have cross-compiled just the basic samba 4.0.6 using bitbake recipe for ARM, which succeeded. However the resulting binaries are large in size. I used the exact same configuration options in both the cases. There is at least a 10 fold increase in the smbd compared to native x86. --- Native x86 -rwxr-xr-x 1 pranavd users 92979 May 31 10:57 /usr/sbin/smbd -rwxr-xr-x 1 pranavd users 351196 May 31 10:57 /usr/sbin/nmbd --- Cross Compiled -rwxr-xr-x 2 pranavd users 9624696 May 30 18:11 /work/armv7a-vfp-neon-oe-linux-gnueabi/samba-4.0.6-r8/packages-split/samba/usr/sbin/smbd -rwxr-xr-x 2 pranavd users 6020020 May 30 18:11 /work/armv7a-vfp-neon-oe-linux-gnueabi/samba-4.0.6-r8/packages-split/samba/usr/sbin/nmbd Can someone please suggest me how to reduce the size of the binaries? I have included the configuration options used. The reason is that your native build uses our waf build, but the cross-compile uses our autoconf build, which statically links all the required code into each binary. Sadly there is still a little work to be done to finish cross-compile support in our waf build - it mostly needs an interested developer to take on injecting the remote python version and flags into the system, rather than these from inside the python that is running the build. Other than that, the build system was built to do this, but it just hasn't been finished, and most cross-compile recipes remain for autoconf, because that is what all the hand-tuning was done for. Note that the autoconf build is fully supported for Samba 4.0, but won't be included in Samba 4.1. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] DC IP address change
Hello: I have been using a test network for testing Samba 4 Everything worked OK using 192.168.1.20 for DC When I changed the IP to another one in a different subnet I modified the following: * The hosts file * Network interfaces * IP forwarders I can access internet, I can ping the DC with the changed IP address But when I run host -t A samba.samdom.example.com. //changing the appropriate host and domain I still get the old IP 192.168.1.120 What am I missing Please help SHB -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Fwd: DC IP address change
I am using Samba 4.0.6 Correction : the old IP is 192.168.1.20 Thank you SHB - Forwarded Message - From: Saad Benateigha sbenatei...@geomega.com To: samba@lists.samba.org Sent: Monday, June 10, 2013 1:30:17 PM Subject: DC IP address change Hello: I have been using a test network for testing Samba 4 Everything worked OK using 192.168.1.20 for DC When I changed the IP to another one in a different subnet I modified the following: * The hosts file * Network interfaces * IP forwarders I can access internet, I can ping the DC with the changed IP address But when I run host -t A samba.samdom.example.com. //changing the appropriate host and domain I still get the old IP 192.168.1.120 What am I missing Please help SHB -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Fwd: DC IP address change
The server name did not change, Just the IP address and the appropriate subnet addresses. - Original Message - From: JUAN EDUARDO DELGADILLO CHAVEZ j...@idec.edu.mx To: Saad Benateigha sbenatei...@geomega.com Sent: Monday, June 10, 2013 2:13:10 PM Subject: RE: [Samba] Fwd: DC IP address change [Samba] Fwd: DC IP address change Did you modify your name server? May be bind? Atentamente cid:image001.jpg@01CE65ED.043BDE50 De: samba-boun...@lists.samba.org [mailto: samba-boun...@lists.samba.org ] En nombre de Saad Benateigha Enviado el: lunes, 10 de junio de 2013 02:38 p.m. Para: samba-boun...@lists.samba.org CC: samba@lists.samba.org Asunto: [Samba] Fwd: DC IP address change I am using Samba 4.0.6 Correction : the old IP is 192.168.1.20 Thank you SHB - Forwarded Message - From: Saad Benateigha sbenatei...@geomega.com To: samba@lists.samba.org Sent: Monday, June 10, 2013 1:30:17 PM Subject: DC IP address change Hello: I have been using a test network for testing Samba 4 Everything worked OK using 192.168.1.20 for DC When I changed the IP to another one in a different subnet I modified the following: * The hosts file * Network interfaces * IP forwarders I can access internet, I can ping the DC with the changed IP address But when I run host -t A samba.samdom.example.com . //changing the appropriate host and domain I still get the old IP 192.168.1.120 What am I missing Please help SHB -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba __ Información de ESET Endpoint Antivirus, versión de la base de datos de firmas de virus 8434 (20130610) __ El mensaje fue verificado por ESET Endpoint Antivirus. http://www.eset-la.com __ Información de ESET Endpoint Antivirus, versión de la base de datos de firmas de virus 8434 (20130610) __ El mensaje fue verificado por ESET Endpoint Antivirus. http://www.eset-la.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Certificates stop working after password change
Hi Andrew, thanks for replying. Certificates are X.509 for personal signatures but have no interaction with the KDC I think, only used to sign on the java application. I'm not aware of what changes are made in the windows clients when we join them to Samba4, but once joined, the user can not change his password without make the certificate unusable. As I mentioned before, if you change the user's password back to the old one, the certificate works correctly. Any idea is welcome. And sorry for my english... Joaquín Cabrera Subject: Re: [Samba] Certificates stop working after password change From: abart...@samba.org To: joca_...@hotmail.com CC: samba@lists.samba.org Date: Sat, 8 Jun 2013 09:35:16 +1000 On Thu, 2013-06-06 at 20:41 +, Joaquin Cabrera wrote: Hi, We found the following problem when working with personal certificates. We have a system in java using certificates at the time of signing, the certificates stop working when the user performs a password change. Customers are connected to the domain Samba4, mainly are pc with windows 7 or vista. This error does not happen with certificates if the equipment is in a workgroup. We also found that if the user change back to the previous password can sign correctly. Reinstall Cetificates whenever the user changes their password is not an option, because we want to implement a policy requiring change passwords every three months. The samba versión is 4.0.3 That is very odd. X.509 certificates presented to our KDC for PK-INIT are not checked against a password in any way - it is entirely up to the validity of the certificate. Can you show the error shown on the KDC when the certificate is rejected? Or are you referring to some other certificate system? Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Certificates stop working after password change
On Mon, 2013-06-10 at 21:49 +, Joaquin Cabrera wrote: Hi Andrew, thanks for replying. Certificates are X.509 for personal signatures but have no interaction with the KDC I think, only used to sign on the java application. I'm not aware of what changes are made in the windows clients when we join them to Samba4, but once joined, the user can not change his password without make the certificate unusable. As I mentioned before, if you change the user's password back to the old one, the certificate works correctly. Any idea is welcome. And sorry for my english... My guess is that the certificates are encrypted with the user's local password, and any password change (enforced or otherwise) is not being captured by the java application to decrypt and re-encrypt the certificate. Do your users change their password at the login screen or with ctrl-alt-del? You could prove it isn't a Samba issue by changing the local windows password on a standalone workstation. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4.0.6 Ubuntu Package Available
On Mon, 2013-06-10 at 11:37 -0500, Mike Ray wrote: Andrew- After git-building the package with your debian directory (as it was at about 9:00 AM UTC-0600), I installed it and started comparing it to the package I had crafted. There are a large number of differences, but almost all of them seem to stem from the work-arounds I implemented to cope with my lack of knowledge in package crafting. For instance, with the samba4_4.0.3 +dfsg1-0.1 debian that we started with, certain variables and paths were not expanding properly which led to build failures; I remedied this problem by changing the install paths and associated rules. It was barbaric methodology, but it did eventually pan out. Other than that though, our packages seem to both function (though one morning of light usage is not a fair trial); though I'm glad to have a proper install thanks to the git tree you linked. One difference though that will matter is that wafsamba.py does not properly expand python as an environment variable when it preforms substitution on the interpreter line for samba_dnsupdate, samba_kcc, samba_spnupdate and samba_upgradedns. The interpreter line as is, will read #!/usr/bin/python2.7# vim: expandtab which causes the 'bad interpreter' error when invoked. Changing wafsamba.py as follows seems to fix the issue: if task.env[PYTHON][0] == /: -replacement_shebang = #!%s % task.env[PYTHON] +replacement_shebang = #!%s\n % task.env[PYTHON] else: -replacement_shebang = #!/usr/bin/env %s % task.env[PYTHON] +replacement_shebang = #!/usr/bin/env %s\n % task.env[PYTHON] This was noticed recently, and will be fixed in the next 4.0 release. The official patch is attached for curiosity, I'll ensure it's added into the debian patches in the meantime. I'm rebuilding the package I made available previously with the up-to-date debian folder as well as that newline fix and my unofficial exclude ip patch. Thanks much for the help, Mike Ray I'm very glad to help. What we need from here is to finish the TODO items listed in debian/TODO, and try and move this package to experimental! Please join the debian list and help out: http://lists.alioth.debian.org/mailman/listinfo/pkg-samba-maint Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org From 0996e95c00ffc468e6482877f21bae3a0f01abe9 Mon Sep 17 00:00:00 2001 From: Michael Adam ob...@samba.org Date: Tue, 28 May 2013 12:19:34 +0200 Subject: [PATCH] build: Add missing new line to replaced python shebang line. (Fix bug #9909) When configuring with a non-standard python specified in the PYTHON environment variable, the shebang lines in various python tools like samba-tool and samba_dnsupdate get replaced. This replace line for the shebang was missing a newline which joined the shebang line with the following line, rendereing those scripts with a nonempty second line unusuable, for example samba_dnsupdate. This patch fixes this bug which is bug #9909 on bugzilla. Pair-Programmed-With: Karolin Seeger ksee...@samba.org Signed-off-by: Michael Adam ob...@samba.org Signed-off-by: Karolin Seeger ksee...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Michael Adam ob...@samba.org Autobuild-Date(master): Wed May 29 13:21:51 CEST 2013 on sn-devel-104 (cherry picked from commit 3f24d694e7e2190d30a17bc13a79a36b49711531) --- buildtools/wafsamba/wafsamba.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/buildtools/wafsamba/wafsamba.py b/buildtools/wafsamba/wafsamba.py index 3559cc1..8eace08 100644 --- a/buildtools/wafsamba/wafsamba.py +++ b/buildtools/wafsamba/wafsamba.py @@ -699,9 +699,9 @@ sys.path.insert(1, %s) % (task.env[PYTHONARCHDIR], task.env[PYTHONDIR]) shebang = None if task.env[PYTHON][0] == /: -replacement_shebang = #!%s % task.env[PYTHON] +replacement_shebang = #!%s\n % task.env[PYTHON] else: -replacement_shebang = #!/usr/bin/env %s % task.env[PYTHON] +replacement_shebang = #!/usr/bin/env %s\n % task.env[PYTHON] installed_location=task.outputs[0].bldpath(task.env) source_file = open(task.inputs[0].srcpath(task.env)) -- 1.7.11.7 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Cross Compiling Samba 4.0.6 for ARM increases size of binaries
On Mon, 2013-06-10 at 10:42 -0700, pranav desai wrote: Thanks Andrew for the reply. Do we have a TODO list need to support cross compilation using the waf build system? I can try and hack around the build system. The issue is the python detection. This isn't hooked in to the system that allows cross-compiles. The WAF build system generates a cache file (default.cache.py) which has all the variables needed to configure the waf system. Is it possible to modify or inject our own variables by modifying the file and ensuring the waf uses the cached values? Also can we expose more variables need for cross-compilation via a 'cross-answers' file? Indeed, there is some detail here: https://wiki.samba.org/index.php/Waf#cross-compiling What would be a good approach to resolve this; I can perform some experiments and upload the code to be reviewed if all works well. What we need is for the python checks, which are run against the current python environment, to be run via cross-answers. I've not worked out the details of how to do that yet. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Replicating Windows 2008 to Samba4
Hi, I am integrating the existing my domain with the samba4. For that, I tried to replicate one of my Windows 2008 DC to samba4 server DC. I successfully replicated the Windows 2008 to the samba4 DC. Here I can login with my windows client. In Linux client , Domain join is successful, But i can't login with the user credentials. In linux client, I am using PBIS application. In the log file /var/log/syslog , i got the following error. FAILED TO GROUP MEMBERSHIPS OF SID =S-1-5-21-3483064688-3190839160-214844843-1601 [ ERROR CODE : 40041] FAILED TO AUTHENTICATE USER ( name = 'user' ) - ERROR = 40041, SYMBOL = LW_ERROR_INVALID_PARAMETER -- with regards Ashok Kumar J -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4.0.6 update - login issues
I would need logs and network traces to investigate this further. Could it be a kerberos ticket expiring? Does it still happen if you upgrade a test member server to 3.6 or 4.0 (so we can narrow down the issue)? I have logs (debug 16 from the client) and a network trace. If you would like me to send them somewhere, let me know where you would like them. Received an alert that Radius authentication fails (ntlm) Log into Radius server via ssh, which uses winbind for auth - receive this error: Domain Controller unreachable, using cached credentials instead. Network resources may be unavailable Ran net ads info [root@durad1 ~]# net ads info LDAP server: 10.9.10.81 LDAP server name: brsad.ad.bigrocksports.com Realm: AD.BIGROCKSPORTS.COM Bind Path: dc=AD,dc=BIGROCKSPORTS,dc=COM LDAP port: 389 Server time: Tue, 11 Jun 2013 00:42:44 EDT KDC server: 10.9.10.81 Server time offset: 0 Ran net ads lookup [root@durad1 ~]# net ads lookup Information for Domain Controller: 10.9.10.81 Response Type: LOGON_SAM_LOGON_RESPONSE_EX GUID: 61b8eb21-20b7-459b-8d7e-224ea1fa85d5 Flags: Is a PDC: yes Is a GC of the forest: yes Is an LDAP server: yes Supports DS:yes Is running a KDC: yes Is running time services: yes Is the closest DC: yes Is writable:yes Has a hardware clock: yes Is a non-domain NC serviced by LDAP server: no Is NT6 DC that has some secrets:no Is NT6 DC that has all secrets: no Forest: ad.bigrocksports.com Domain: ad.bigrocksports.com Domain Controller: brsad.ad.bigrocksports.com Pre-Win2k Domain: BRS Pre-Win2k Hostname: BRSAD Server Site Name : Default-First-Site-Name Client Site Name : Default-First-Site-Name NT Version: 5 LMNT Token: LM20 Token: tried a winbind ping [root@durad1 ~]# wbinfo -p Ping to winbindd succeeded id username fails with No such user kinit usern...@ad.bigrocksports.com works. Email server authenticates against LDAP - and that is working without an issue. Restarted winbind on Radius server, did not change failed results ntlm_auth fails [root@durad1 ~]# /usr/bin/ntlm_auth --request-nt-key --domain=AD.BIGROCKSPORTS.COM --username=kpettijohn --password=password NT_STATUS_NO_LOGON_SERVERS: No logon servers (0xc05e) Attempted to leave and re-join the domain: [root@durad1 samba]# net ads join -U Administrator Enter Administrator's password: Failed to join domain: failed to lookup DC info for domain 'AD.BIGROCKSPORTS.COM' over rpc: The connection was refused Restart samba DC on 10.9.10.81 (brsad.ad.bigrocksports.com), and machine can now join and ntlm_auth works. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-06-10-0943/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2013-06-10-0943/samba3.stderr http://git.samba.org/autobuild.flakey/2013-06-10-0943/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2013-06-10-0943/samba.stderr http://git.samba.org/autobuild.flakey/2013-06-10-0943/samba.stdout The top commit at the time of the failure was: commit 7f760ed84b4b34937b3a65577f971cc95f452e0f Author: Matthias Dieter Wallnöfer m...@samba.org Date: Sat Jun 8 23:45:43 2013 +0200 s4:samldb LDB module - MS-SAMR 3.1.1.8.10 userAccountControl UF_LOCKOUT and UF_PASSWORD_EXPIRED are never stored but rather are used for special semantics. UF_LOCKOUT performs an account lockout and UF_PASSWORD_EXPIRED forces password expiration. Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Mon Jun 10 07:32:35 CEST 2013 on sn-devel-104
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-06-10-1140/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2013-06-10-1140/samba3.stderr http://git.samba.org/autobuild.flakey/2013-06-10-1140/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2013-06-10-1140/samba.stderr http://git.samba.org/autobuild.flakey/2013-06-10-1140/samba.stdout The top commit at the time of the failure was: commit 7f760ed84b4b34937b3a65577f971cc95f452e0f Author: Matthias Dieter Wallnöfer m...@samba.org Date: Sat Jun 8 23:45:43 2013 +0200 s4:samldb LDB module - MS-SAMR 3.1.1.8.10 userAccountControl UF_LOCKOUT and UF_PASSWORD_EXPIRED are never stored but rather are used for special semantics. UF_LOCKOUT performs an account lockout and UF_PASSWORD_EXPIRED forces password expiration. Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Mon Jun 10 07:32:35 CEST 2013 on sn-devel-104
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-06-10-1750/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2013-06-10-1750/samba3.stderr http://git.samba.org/autobuild.flakey/2013-06-10-1750/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2013-06-10-1750/samba.stderr http://git.samba.org/autobuild.flakey/2013-06-10-1750/samba.stdout The top commit at the time of the failure was: commit 7f760ed84b4b34937b3a65577f971cc95f452e0f Author: Matthias Dieter Wallnöfer m...@samba.org Date: Sat Jun 8 23:45:43 2013 +0200 s4:samldb LDB module - MS-SAMR 3.1.1.8.10 userAccountControl UF_LOCKOUT and UF_PASSWORD_EXPIRED are never stored but rather are used for special semantics. UF_LOCKOUT performs an account lockout and UF_PASSWORD_EXPIRED forces password expiration. Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Mon Jun 10 07:32:35 CEST 2013 on sn-devel-104
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 2a65e8b Optimization on POSIX platforms that have fstatat.
via da2cf8a Check for fstatat.
from 7f760ed s4:samldb LDB module - MS-SAMR 3.1.1.8.10
userAccountControl
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 2a65e8befef004fd18d17853a1b72155752346c8
Author: Jeremy Allison j...@samba.org
Date: Fri May 24 10:33:38 2013 -0700
Optimization on POSIX platforms that have fstatat.
Tests show significant speedup in directory listings
by using fstatat instead of a full pathname walk.
Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Andreas Schneider a...@samba.org
Autobuild-User(master): Andreas Schneider a...@cryptomilk.org
Autobuild-Date(master): Mon Jun 10 20:14:12 CEST 2013 on sn-devel-104
commit da2cf8a947b5beda3e32cb5d9c5b0899a3bf5f61
Author: Jeremy Allison j...@samba.org
Date: Fri Jun 7 17:53:45 2013 -0700
Check for fstatat.
Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Andreas Schneider a...@samba.org
---
Summary of changes:
source3/modules/vfs_default.c | 27 +++
source3/wscript |1 +
2 files changed, 24 insertions(+), 4 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/modules/vfs_default.c b/source3/modules/vfs_default.c
index 8804e62..82d059c 100644
--- a/source3/modules/vfs_default.c
+++ b/source3/modules/vfs_default.c
@@ -376,11 +376,30 @@ static struct dirent *vfswrap_readdir(vfs_handle_struct
*handle,
START_PROFILE(syscall_readdir);
result = readdir(dirp);
- /* Default Posix readdir() does not give us stat info.
-* Set to invalid to indicate we didn't return this info. */
- if (sbuf)
- SET_STAT_INVALID(*sbuf);
END_PROFILE(syscall_readdir);
+ if (sbuf) {
+ /* Default Posix readdir() does not give us stat info.
+* Set to invalid to indicate we didn't return this info. */
+ SET_STAT_INVALID(*sbuf);
+#if defined(HAVE_DIRFD) defined(HAVE_FSTATAT)
+ if (result != NULL) {
+ /* See if we can efficiently return this. */
+ struct stat st;
+ int flags = (lp_posix_pathnames() ?
+ AT_SYMLINK_NOFOLLOW : 0);
+ int ret = fstatat(dirfd(dirp),
+ result-d_name,
+ st,
+ flags);
+ if (ret == 0) {
+ init_stat_ex_from_stat(sbuf,
+ st,
+ lp_fake_dir_create_times(
+ SNUM(handle-conn)));
+ }
+ }
+#endif
+ }
return result;
}
diff --git a/source3/wscript b/source3/wscript
index 98a486f..b23608c 100644
--- a/source3/wscript
+++ b/source3/wscript
@@ -89,6 +89,7 @@ def configure(conf):
conf.CHECK_FUNCS('fseeko setluid')
conf.CHECK_FUNCS('getpwnam', headers='sys/types.h pwd.h')
conf.CHECK_FUNCS('fdopendir')
+conf.CHECK_FUNCS('fstatat')
conf.CHECK_FUNCS('getpwent_r setenv strcasecmp fcvt fcvtl')
conf.CHECK_FUNCS('syslog vsyslog timegm setlocale')
conf.CHECK_FUNCS_IN('nanosleep', 'rt')
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via 242cc0b When message-type is drvupgrade, MSG_DEBUG should be replaced with MSG_PRINTER_DRVUPGRADE. from b5243a5 check_parent_exists() can change errno. Ensure we preserve it across calls. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit 242cc0b992cc627d6b1730ce089e39125ed7d300 Author: Peng Haitao pen...@cn.fujitsu.com Date: Wed May 22 14:03:13 2013 -0700 When message-type is drvupgrade, MSG_DEBUG should be replaced with MSG_PRINTER_DRVUPGRADE. Reviewed-by: Jeremy Allison j...@samba.org Reviewed-by: Michael Adam ob...@samba.org Fix bug #9941 - Fix a bug of drvupgrade of smbcontrol. --- Summary of changes: source3/utils/smbcontrol.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/utils/smbcontrol.c b/source3/utils/smbcontrol.c index 2759136..acf963b 100644 --- a/source3/utils/smbcontrol.c +++ b/source3/utils/smbcontrol.c @@ -936,7 +936,7 @@ static bool do_drvupgrade(struct messaging_context *msg_ctx, return False; } - return send_message(msg_ctx, pid, MSG_DEBUG, argv[1], + return send_message(msg_ctx, pid, MSG_PRINTER_DRVUPGRADE, argv[1], strlen(argv[1]) + 1); } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-0-test updated
The branch, v4-0-test has been updated
via 9328284 When message-type is drvupgrade, MSG_DEBUG should be
replaced with MSG_PRINTER_DRVUPGRADE.
via 865765c Check for WRITE_ACCESS on the file before overriding an
EACCESS.
via e90f140 Ensure we don't try the open_file_fchmod() if we can't
write to the file.
via 02a9d78 Remove indentation around code wrapped by unneeded
CAN_WRITE.
via 7391cae Add early return in file_set_dosmode() on a read only share.
from d0ec11d BUG 9881: Check for system libtevent.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test
- Log -
commit 93282840a193e107cb482494c76b26b681e8bd8d
Author: Peng Haitao pen...@cn.fujitsu.com
Date: Wed May 22 14:03:13 2013 -0700
When message-type is drvupgrade, MSG_DEBUG should be replaced with
MSG_PRINTER_DRVUPGRADE.
Reviewed-by: Jeremy Allison j...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
Fix bug #9941 - Fix a bug of drvupgrade of smbcontrol.
Autobuild-User(v4-0-test): Karolin Seeger ksee...@samba.org
Autobuild-Date(v4-0-test): Mon Jun 10 23:09:33 CEST 2013 on sn-devel-104
commit 865765c24c45625b1f1bf901147f157667f397e5
Author: Jeremy Allison j...@samba.org
Date: Thu Apr 25 14:06:03 2013 -0700
Check for WRITE_ACCESS on the file before overriding an EACCESS.
Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Volker Lendecke v...@samba.org
Autobuild-User(master): Volker Lendecke v...@samba.org
Autobuild-Date(master): Sat Apr 27 15:57:17 CEST 2013 on sn-devel-104
(cherry picked from commit 5185460067229a342ddf3951ecc968017c2ed4df)
The last 4 patches address bug #9794 - opening/editing or copying MS files
causes a core dump with invalid lock order.
commit e90f140baf54c2e8fcbefc273e1d760900deea9a
Author: Jeremy Allison j...@samba.org
Date: Thu Apr 25 14:02:24 2013 -0700
Ensure we don't try the open_file_fchmod() if we can't write to the file.
Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Volker Lendecke v...@samba.org
(cherry picked from commit 77e3099483489ef4d59087dc6542fe7f7b589224)
commit 02a9d789d1c81fff2889109dd162be3f829bc126
Author: Jeremy Allison j...@samba.org
Date: Thu Apr 25 14:00:42 2013 -0700
Remove indentation around code wrapped by unneeded CAN_WRITE.
Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Volker Lendecke v...@samba.org
(cherry picked from commit a91aac4a5f0bd2077be267e49d1fc4f0321bb39c)
commit 7391caec00d05963dd6f4e05130a86a207294669
Author: Jeremy Allison j...@samba.org
Date: Thu Apr 25 13:59:22 2013 -0700
Add early return in file_set_dosmode() on a read only share.
Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Volker Lendecke v...@samba.org
(cherry picked from commit 0d88b37fc63023eeb749080713449b124e346e9e)
---
Summary of changes:
source3/smbd/dosmode.c | 57 ++-
source3/utils/smbcontrol.c |2 +-
2 files changed, 35 insertions(+), 24 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/smbd/dosmode.c b/source3/smbd/dosmode.c
index ad04a65..3152631 100644
--- a/source3/smbd/dosmode.c
+++ b/source3/smbd/dosmode.c
@@ -419,6 +419,10 @@ static bool set_ea_dos_attribute(connection_struct *conn,
if(!CAN_WRITE(conn) || !lp_dos_filemode(SNUM(conn)))
return false;
+ if (!can_write_to_file(conn, smb_fname)) {
+ return false;
+ }
+
/*
* We need to open the file with write access whilst
* still in our current user context. This ensures we
@@ -706,6 +710,12 @@ int file_set_dosmode(connection_struct *conn, struct
smb_filename *smb_fname,
int ret = -1, lret = -1;
uint32_t old_mode;
struct timespec new_create_timespec;
+ files_struct *fsp = NULL;
+
+ if (!CAN_WRITE(conn)) {
+ errno = EROFS;
+ return -1;
+ }
/* We only allow READONLY|HIDDEN|SYSTEM|DIRECTORY|ARCHIVE here. */
dosmode = (SAMBA_ATTRIBUTES_MASK | FILE_ATTRIBUTE_OFFLINE);
@@ -848,29 +858,30 @@ int file_set_dosmode(connection_struct *conn, struct
smb_filename *smb_fname,
bits on a file. Just like file_ntimes below.
*/
- /* Check if we have write access. */
- if (CAN_WRITE(conn)) {
- /*
-* We need to open the file with write access whilst
-* still in our current user context. This ensures we
-* are not violating security in doing the fchmod.
-*/
- files_struct *fsp;
- if (!NT_STATUS_IS_OK(open_file_fchmod(conn, smb_fname,
-
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 424a990 s4-dfs_server: check for netbios aliases in ad_get_referrals
from 2a65e8b Optimization on POSIX platforms that have fstatat.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 424a990e34278fae4888b00affb530ed1fbcb354
Author: Björn Baumbach b...@sernet.de
Date: Wed Jun 5 15:01:14 2013 +0200
s4-dfs_server: check for netbios aliases in ad_get_referrals
Without this patch ad_get_referrals checks for netbios, dns names
and ip, but not for netbios aliases set by netbios aliases option,
whether the requested name is our dns name.
Pair-programmed-with: Stefan Metzmacher me...@samba.org
Signed-off-by: Björn Baumbach b...@sernet.de
Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
Autobuild-User(master): Michael Adam ob...@samba.org
Autobuild-Date(master): Tue Jun 11 01:12:08 CEST 2013 on sn-devel-104
---
Summary of changes:
dfs_server/dfs_server_ad.c | 35 +++
1 files changed, 35 insertions(+), 0 deletions(-)
Changeset truncated at 500 lines:
diff --git a/dfs_server/dfs_server_ad.c b/dfs_server/dfs_server_ad.c
index 4d3891a..249a1d1 100644
--- a/dfs_server/dfs_server_ad.c
+++ b/dfs_server/dfs_server_ad.c
@@ -751,6 +751,7 @@ NTSTATUS dfs_server_ad_get_referrals(struct
loadparm_context *lp_ctx,
const char *dns_domain;
const char *netbios_name;
const char *dns_name;
+ const char **netbios_aliases;
if (!lpcfg_host_msdfs(lp_ctx)) {
return NT_STATUS_FS_DRIVER_REQUIRED;
@@ -827,6 +828,40 @@ NTSTATUS dfs_server_ad_get_referrals(struct
loadparm_context *lp_ctx,
return NT_STATUS_NOT_FOUND;
}
+ netbios_aliases = lpcfg_netbios_aliases(lp_ctx);
+ while (netbios_aliases *netbios_aliases) {
+ const char *netbios_alias = *netbios_aliases;
+ char *dns_alias;
+ int cmp;
+
+ cmp = strcasecmp_m(server_name, netbios_alias);
+ if (cmp == 0) {
+ /*
+* If it is not domain related do not
+* handle it here.
+*/
+ return NT_STATUS_NOT_FOUND;
+ }
+
+ dns_alias = talloc_asprintf(r, %s.%s,
+ netbios_alias,
+ dns_domain);
+ if (dns_alias == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ cmp = strcasecmp_m(server_name, dns_alias);
+ talloc_free(dns_alias);
+ if (cmp == 0) {
+ /*
+* If it is not domain related do not
+* handle it here.
+*/
+ return NT_STATUS_NOT_FOUND;
+ }
+ netbios_aliases++;
+ }
+
if ((strcasecmp_m(server_name, netbios_domain) != 0)
(strcasecmp_m(server_name, dns_domain) != 0)) {
/*
--
Samba Shared Repository
