Re: [Samba] Problem to demote samba4 dc

2013-08-04 Thread Andrew Bartlett
the AD domain. It shouldn't matter that it's a Samba DC. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go

Re: [Samba] Samba4 domain trust

2013-08-04 Thread Andrew Bartlett
hard. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] Slow FIND_FIRST2 response

2013-08-01 Thread Andrew Bartlett
forks, then they may not fit, in which case perhaps try vfs objects = streams_depot, which uses a magic directory, but is less tidy and less efficient). Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer

Re: [Samba] Problem to demote samba4 dc

2013-08-01 Thread Andrew Bartlett
show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? The best option would be to turn off the Samba DC, and then use ADUC on Windows and tell it that the Samba DC is permanently off-line. The roles can be seized from there. Andrew Bartlett

Re: [Samba] Turnkey Samba 4 Solutions?

2013-08-01 Thread Andrew Bartlett
. https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go

[Samba] [PATCH] Re: ./configure LDAP checks failing on AIX

2013-08-01 Thread Andrew Bartlett
On Thu, 2013-08-01 at 11:10 +0200, Gilles Pion wrote: 2013/7/31 Andrew Bartlett abart...@samba.org Very interesting! That we certainly can fix, thanks for the heads-up! I've also filed a bug on that issue: https://bugzilla.samba.org/show_bug.cgi?id=10047 If I've understood you correctly

Re: [Samba] ./configure LDAP checks failing on AIX

2013-07-31 Thread Andrew Bartlett
fix, thanks for the heads-up! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read

Re: [Samba] ./configure LDAP checks failing on AIX

2013-07-31 Thread Andrew Bartlett
fix, thanks for the heads-up! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read

Re: [Samba] samba4 - classicupgrade - problem - passdb.error uncaught exception - Cannot load backend methods for 'ldapsam:ldap://localhost' backend NT_STATUS_CANT_ACCESS_DOMAIN_INFO

2013-07-31 Thread Andrew Bartlett
=mydomain.com /samba3/smb.conf --dns-backend=BIND9_DLZ This is clearly your issue: smbldap_search_domain_info: Problem during LDAPsearch: Timed out If your LDAP server is timing out, there is no hope Samba can upgrade this domain. You need to work out why this happens. Andrew Bartlett -- Andrew

Re: [Samba] ./configure LDAP checks failing on AIX

2013-07-30 Thread Andrew Bartlett
specify CFLAGS=-I/usr/local/openldap/include ./configure (if that is where ldap.h is). If we have found ldap.h, it will be added to those tests. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst

Re: [Samba] AD DC and the Guest account

2013-07-30 Thread Andrew Bartlett
option work) the correct way is to see if Guest is enabled. Otherwise, it is a known issue, so at least don't feel bad about hitting it. Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst

Re: [Samba] Does anyone think a mini-Samba server would be useful?

2013-07-30 Thread Andrew Bartlett
to depend on across the whole sever. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read

Re: [Samba] Error on classic upgrade - valid group

2013-07-30 Thread Andrew Bartlett
just a guess, but somewhere to start. Otherwise, perhaps look at this group and see if there is anything different about it? Can you show me the LDIF? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer

Re: [Samba] NT4 clients

2013-07-30 Thread Andrew Bartlett
connecting to the machine by IP or by a name the KDC doesn't know. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from

Re: [Samba] NT4 clients

2013-07-30 Thread Andrew Bartlett
as an AD DC. Then I might be able to assist, otherwise, the only 'buggy' part of this would seem to be the new security behavior of Windows 7, which you may be able to disable. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http

Re: [Samba] Samba 4 Slow Performance

2013-07-30 Thread Andrew Bartlett
On Wed, 2013-07-31 at 10:07 +0800, Kinglok, Fong wrote: On 29 Jul, 2013, at 1:13 PM, Andrew Bartlett abart...@samba.org wrote: On Sat, 2013-07-27 at 23:20 +0800, Kinglok, Fong wrote: Dear all, After using samba 3 for two years, I have just spent totally one week finishing setting up

Re: [Samba] NT4 clients

2013-07-29 Thread Andrew Bartlett
is incorrect. NT4 doesn't know about Kerberos, I think any TGS traffic is highly likely a red herring. Are you really sure the client is issuing it, and you have not additional software installed on the NT4 machine? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication

Re: [Samba] samba4 - classicupgrade - problem - passdb.error uncaught exception - Cannot load backend methods for 'ldapsam:ldap://localhost' backend NT_STATUS_CANT_ACCESS_DOMAIN_INFO

2013-07-29 Thread Andrew Bartlett
) I think you may have cleaned too much, or not have the right settings - this means that the ldap server listning on port 389 localhost does not have a copy of your Samba3 domain. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http

[SCM] Samba Shared Repository - branch master updated

2013-07-29 Thread Andrew Bartlett
Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Mon Jul 29 09:12:17 CEST 2013 on sn-devel-104 --- Summary of changes: source4/dns_server/TODO | 13

Re: [Samba] Samba 4 Slow Performance

2013-07-28 Thread Andrew Bartlett
something different to a slow database - they indicate things like DNS timeing out. Once you work out which specific operation is blocking, we can investigate more - be it in regards to your network, or our code, we don't mind either way, but we need to work out which to look into. Andrew Bartlett

[SCM] Samba Shared Repository - branch master updated

2013-07-27 Thread Andrew Bartlett
-by: Andreas Schneider a...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Sat Jul 27 08:31:14 CEST 2013 on sn-devel-104

[SCM] Samba Shared Repository - branch master updated

2013-07-24 Thread Andrew Bartlett
...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Wed Jul 24 14:37:43 CEST 2013 on sn-devel-104 --- Summary

Re: [Samba] Building with debug symbols and different optimisation levels

2013-07-23 Thread Andrew Bartlett
, I can't even find where the optimisation level is set, however, I am unfamiliar with waf. Is there a (even hacky) way to do this? Just pass whatever CFLAGS you desire to the ./configure wrapper, and they will be used. Andrew Bartlett -- Andrew Bartletthttp

Re: [Samba] Win 2003 DC Demotion

2013-07-23 Thread Andrew Bartlett
Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba4 join new DC: No RID Set DN - Failed to add RID Set

2013-07-23 Thread Andrew Bartlett
for a RID set to be created shortly after starting up, and certainly an attempt to create users is made. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

Re: [Samba] Upgrading samba3 to samba4 on a new server, and running them both at the same time

2013-07-23 Thread Andrew Bartlett
, or if they change their machine account passwords. Additionally, the DCs will fight over the PDC role netbios name. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org

[SCM] Samba Shared Repository - branch master updated

2013-07-19 Thread Andrew Bartlett
of an EA list. Add torture tests to probe the set of invalid Windows EA names. Bug 9992 - Windows error 0x800700FE when copying files with xattr names containing : Signed-off-by: Jeremy Allison j...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org

Re: [Samba] samba4 - error during classicupgrade

2013-07-15 Thread Andrew Bartlett
administrator alread exist (created by full provision I suppose) Just rename 'Administrator' to 'English Administrator' and then after then upgrade, rename 'administrator' to Administrateur. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet

Re: [Samba] About NAS versus Samba

2013-07-14 Thread Andrew Bartlett
On Fri, 2013-07-12 at 11:55 -0300, Fernando Lozano wrote: Hi Andrew, I work on a NAS product myself, and at this vendor and my previous vendor Samba 4.0 as an AD DC was all I ever needed to use to test the AD integration features of the NAS. Thanks, Andrew Bartlett Please tell me

Re: [Samba] WARNING to those running Samba on OpenIndiana or other Illumos based systems with 16 groups

2013-07-14 Thread Andrew Bartlett
On Wed, 2013-04-24 at 10:31 +1000, Andrew Bartlett wrote: Just a heads-up, because this bug took me absolutely ages to chase down, and I want to save others the same pain. Samba is perhaps the most prominent reason why you might find a user in more than 16 groups on a Unix system, and so

Re: [Samba] samba4 - error during classicupgrade

2013-07-14 Thread Andrew Bartlett
in my view) it will collide. Just remove that from the import source before you start. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

Re: [Samba] Samba 4.0.6 update - login issues

2013-07-13 Thread Andrew Bartlett
are of course free to test. Sorry, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org

Re: [Samba] Excessive allocations from RID master

2013-07-11 Thread Andrew Bartlett
=10014 Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] [Announce] Samba 4.1.0rc1 Available for Download

2013-07-11 Thread Andrew Bartlett
4.1 in just a couple of months. GIT master now have Samba 4.2 in it's VERSION file, and will be branched and released as Samba 4.2 in around a year, if things go to plan. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba

Re: [Samba] About NAS versus Samba

2013-07-11 Thread Andrew Bartlett
with a Samba 4.0 AD DC, then it's a bug we will fix. I work on a NAS product myself, and at this vendor and my previous vendor Samba 4.0 as an AD DC was all I ever needed to use to test the AD integration features of the NAS. Thanks, Andrew Bartlett -- Andrew Bartlett

Re: [Samba] oLschema2ldif segfault

2013-07-11 Thread Andrew Bartlett
this tool, and someone needs to write a replacement in python. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read

Re: [Samba] Samba4 KCC

2013-07-11 Thread Andrew Bartlett
outstanding tasks is to replace our KCC with a new prototype developed in python. I don't know if it understands sites, but it was designed rather than what we have now, which was just put in place as a stop-gap. Andrew Bartlett -- Andrew Bartletthttp://samba.org

Re: [Samba] Help Samba license

2013-07-10 Thread Andrew Bartlett
suggest you licence your program under GPL compatible terms. Additionally, all supported Samba versions are now licensed under GPLv3 or later, with only some specific support libraries under other less protective licences. I hope this clarifies things, Andrew Bartlett -- Andrew Bartlett

[Samba] [PLEASE TEST] Samba AD DC winbind hangs and timeouts

2013-07-10 Thread Andrew Bartlett
there are multiple overlapping issues here, which all seem to have been uncovered by the one interfaces patch). If not, we will continue to chase this down, otherwise this should allow us to merge the fixes into 4.0 and the new 4.1 branch. Thanks, Andrew Bartlett -- Andrew Bartlett

Re: [Samba] domain RODC fails with default provisioning

2013-07-10 Thread Andrew Bartlett
, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[SCM] Samba Shared Repository - branch master updated

2013-07-10 Thread Andrew Bartlett
- commit 6ac6bf9c8c59fa679436d0d674a1b4525b4c6dbb Author: Karolin Seeger ksee...@samba.org Date: Mon Jul 8 09:07:32 2013 +0200 docs: Bump version in meta data up to 4.1. Signed-off-by: Karolin Seeger ksee...@samba.org Reviewed-by: Andrew Bartlett abart

Re: [Samba] [PATCH] Do not close winbind socket during use

2013-07-09 Thread Andrew Bartlett
On Tue, 2013-07-09 at 22:36 +0200, Stefan (metze) Metzmacher wrote: Am 09.07.2013 18:03, schrieb Stefan (metze) Metzmacher: Am 09.07.2013 17:33, schrieb Stefan (metze) Metzmacher: Hi Andrew, Am 03.07.2013 09:44, schrieb Andrew Bartlett: On Thu, 2013-06-27 at 11:42 +1000, Andrew Bartlett

Re: [Samba] samba-tool classic upgrade - Next rid problem

2013-07-05 Thread Andrew Bartlett
Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] R2 2008 Windows Domain Contoller VS Samba

2013-07-05 Thread Andrew Bartlett
releases, being 3.6 and 4.0. I'm not surprised there are issues with code as old as 3.0.28. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

Re: [Samba] samba-tool classic upgrade - Next rid problem

2013-07-05 Thread Andrew Bartlett
no other option. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman

Re: [Samba] Samba 4 Rhedhat 6 And classicupgrade errors

2013-07-04 Thread Andrew Bartlett
the above message carefully, and ensure no user has the same SID as a group in your source databases. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

Re: [Samba] [PATCH] Do not close winbind socket during use

2013-07-03 Thread Andrew Bartlett
On Thu, 2013-06-27 at 11:42 +1000, Andrew Bartlett wrote: On Wed, 2013-06-26 at 20:39 +1000, Andrew Bartlett wrote: On Mon, 2013-06-24 at 15:26 +, philippe.simo...@swisscom.com wrote: Hi Andrew, and by putting more num-callers : valgrind --num-callers=50 samba -i -M single

Re: [Samba] Samba Domain Rename

2013-07-03 Thread Andrew Bartlett
situation it would be a miracle, but just occasionally we find this stuff just happens to work because the hard work is in the client tool, not the DC. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http

Re: [Samba] Samba 4 with FreeIPA as Backend

2013-06-29 Thread Andrew Bartlett
it's own LDB database as a backend. FreeIPA I understand is able to sync or integrate with an AD DC, but you would need to ask them about that. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http

Re: [Samba] [PATCH] Do not close winbind socket during use

2013-06-27 Thread Andrew Bartlett
Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] [PATCH] Do not close winbind socket during use

2013-06-27 Thread Andrew Bartlett
On Thu, 2013-06-27 at 11:42 +1000, Andrew Bartlett wrote: On Wed, 2013-06-26 at 20:39 +1000, Andrew Bartlett wrote: On Mon, 2013-06-24 at 15:26 +, philippe.simo...@swisscom.com wrote: Hi Andrew, and by putting more num-callers : valgrind --num-callers=50 samba -i -M single

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-26 Thread Andrew Bartlett
a timeout. At least this should help me figure out why we process the winbind socket close, which is the crux of this issue. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org

Re: [Samba] str[fp]time - what is this and can I add padding? smb.conf

2013-06-26 Thread Andrew Bartlett
to be there of course. I'm not quite sure what you're after here. I like the look of the ZFS shadow copy work ! Please finish up and submit it so we can get it into master. Jeremy, The link refers, as far as I can tell to the code (by another author) that we now have in master. Andrew Bartlett

Re: [Samba] Decommissioning old PDC

2013-06-26 Thread Andrew Bartlett
, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] [PATCH] Do not close winbind socket during use

2013-06-26 Thread Andrew Bartlett
On Wed, 2013-06-26 at 20:39 +1000, Andrew Bartlett wrote: On Mon, 2013-06-24 at 15:26 +, philippe.simo...@swisscom.com wrote: Hi Andrew, and by putting more num-callers : valgrind --num-callers=50 samba -i -M single Thanks for getting me that. I've managed to reproduce it here

[SCM] Samba Shared Repository - branch master updated

2013-06-24 Thread Andrew Bartlett
- commit 48ae86f74c5ed2ae2612d61e232bfcf93d44c7f8 Author: Andrew Bartlett abart...@samba.org Date: Sun Jun 16 14:02:57 2013 +1000 heimdal_build: Add missing dep on samba4kgetcred This started to fail on current Debian Sid with system Heimdal after

Re: [Samba] [samba 4.0.6] samba_dnsupdate and samba_spnupdate failling

2013-06-23 Thread Andrew Bartlett
: /usr/bin/samba_dnsupdate: /usr/bin/python2#: bad interpreter: No such file or directory Any ideas about how to solve this issue?. Insert a newline before the # Alternately, the patch for this is attached, which will be in the next 4.0 release. Andrew Bartlett -- Andrew Bartlett

Re: [Samba] Joining Mac OSX 10.8.4 Small contribution for the documentation/wiki?...

2013-06-23 Thread Andrew Bartlett
. Maybe it's useful to anyone here To edit the wiki, please contact contribut...@samba.org with your details (full name, e-mail) and preferred username, so we can issue you an account. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication

Re: [Samba] custom permission for single user deep in tree where he has no access

2013-06-22 Thread Andrew Bartlett
to solve this. On the tree to the directory where the user needs access, he needs UNIX execute permission. This works well so far, he cannot read or list anything apart from the directory in the tree where he needs rw access. That is the correct unix way of doing this. Andrew Bartlett

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-22 Thread Andrew Bartlett
in the context, and I want to be sure we are not chasing an unrelated issue. Thanks, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-22 Thread Andrew Bartlett
On Sat, 2013-06-22 at 17:08 +1000, Andrew Bartlett wrote: On Fri, 2013-06-21 at 08:10 +, philippe.simo...@swisscom.com wrote: I tried both, and I get still crashes : 0001-gensec-work-around-nested-event-loops-by-ensuring-th.patch 0002-s4-winbind-Add-special-case-for-BUILTIN

[SCM] Samba Shared Repository - branch master updated

2013-06-22 Thread Andrew Bartlett
- commit 0ee8650d778736a130e914df9e14734ef18e0fb5 Author: Andrew Bartlett abart...@samba.org Date: Sat Jun 15 16:00:42 2013 +1000 ldb: Ensure not to segfault on a filter such as (mail=) As reported by Robin McCorkell xenopat...@gmail.com triggered by Mozilla

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-21 Thread Andrew Bartlett
=== INTERNAL ERROR: Signal 11 in pid 4844 (4.0.6) Please read the Trouble-Shooting section of the Samba HOWTO === PANIC: internal error Aborted - Best regards Philippe Thanks, Andrew Bartlett -- Andrew Bartlett

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-21 Thread Andrew Bartlett
. Each attempts to solve the problem in a different way. Please try each of them, and tell me if you still get the crash. Thanks, Andrew Bartlett best regards Philippe -Original Message- From: Andrew Bartlett [mailto:abart...@samba.org] Sent: Friday, June 21, 2013 9:18 AM

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-21 Thread Andrew Bartlett
backend, they essentially all need to be domain controllers of the same domain. This is the supported way to have a single backend shared between multiple servers. You don't need to ever use the DC function from windows clients, but the servers need to think they are a DC. Andrew Bartlett

[SCM] Samba Shared Repository - branch master updated

2013-06-20 Thread Andrew Bartlett
://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 88c72fceb1c86752c52651bdea5b116806dd92c5 Author: Andrew Bartlett abart...@samba.org Date: Sat Jun 15 23:01:44 2013 +1000 s4-winbind: Add special case for BUILTIN domain

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-19 Thread Andrew Bartlett
On Tue, 2013-06-18 at 10:07 +0200, Volker Lendecke wrote: On Tue, Jun 18, 2013 at 12:49:37PM +1000, Andrew Bartlett wrote: This patch attempts to address an issue some have reported where our nss_winbind is even slower than it's simple non-caching implementation needs to be. I think

Re: [Samba] The account is not authorized to login from this station

2013-06-19 Thread Andrew Bartlett
this line. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options

[SCM] Samba Website Repository - branch master updated

2013-06-18 Thread Andrew Bartlett
- commit 8af03ee622aa0e1d27fc5a927967c8c660b04c3b Author: Andrew Bartlett abart...@samba.org Date: Wed Jun 19 15:07:16 2013 +1000 Update and clarify the Samba copyright policy and Developer Certificate Origin This clarifies how

Re: [Samba] Backup samba4 using LVM snapshot

2013-06-17 Thread Andrew Bartlett
the backup is consistent. So, just as you must shut down or freeze mysql, you must do the same with Samba. tdbbackup is how you get a frozen database out of a running Samba, so run that script, then run your lvm backup. Andrew Bartlett -- Andrew Bartletthttp

Re: [Samba] Replication problems

2013-06-17 Thread Andrew Bartlett
of replication, when we write tests we often find even more issues :-) Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read

Re: [Samba] WORKAROUND: Re: [samba4] crash of winbind after ls -l /usr/local/samba/var/locks/sysvol

2013-06-17 Thread Andrew Bartlett
On Mon, 2013-06-17 at 11:51 -0700, Jeremy Allison wrote: On Sat, Jun 15, 2013 at 06:35:34PM +1000, Andrew Bartlett wrote: On Tue, 2013-04-30 at 20:32 +, philippe.simo...@swisscom.com wrote: Many thanks Michae for your answer,l here the results of bisect and some samba 'strange

Re: [Samba] Losing Permissions of Files

2013-06-17 Thread Andrew Bartlett
modes: map system = no map hidden = no I hope this helps clarify things. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

[Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-17 Thread Andrew Bartlett
validation step, throwing away that connection. I think this is also the cause of crashes folks have seen. Can I get some confirmation that this helps, so I can merge this into master (and then 4.0.x)? Thanks, Andrew Bartlett -- Andrew Bartletthttp://samba.org

[Samba] WORKAROUND: Re: [samba4] crash of winbind after ls -l /usr/local/samba/var/locks/sysvol

2013-06-15 Thread Andrew Bartlett
into this myself, as well as following up with those involved in the change, but I wanted to give you a big thankyou for doing the bisect, and to say that you clearly are on the right track. Thanks, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication

Re: [Samba] Replicating Windows 2008 to Samba4

2013-06-12 Thread Andrew Bartlett
without Samba 4.0 as an AD DC involved? In the log file /var/log/syslog , i got the following error ( error attached in this mail). That attachment must be text/plain to remain on the mail to the list. Thanks, Andrew Bartlett -- Andrew Bartletthttp

Re: [Samba] Replicating Windows 2008 to Samba4

2013-06-12 Thread Andrew Bartlett
is showing an error, or isn't working. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] Samba 4.0.6 Ubuntu Package Available

2013-06-12 Thread Andrew Bartlett
, because I just tested exactly that on my Sid box with these packages installed, and it worked fine. My only hope is that perhaps there may be some clues in a debdiff between the packages? Thanks, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet

Re: [Samba] Samba 4.0.6 Ubuntu Package Available

2013-06-12 Thread Andrew Bartlett
On Wed, 2013-06-12 at 16:37 +1000, Andrew Bartlett wrote: On Tue, 2013-06-11 at 11:38 -0500, Mike Ray wrote: Andrew- I'll be sure to join the mailing list and help out when I can. However, a bit of bad news, I started to use that package that resulted from your debian directory

Re: [Samba] Certificates stop working after password change

2013-06-12 Thread Andrew Bartlett
what the difference is here. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org

Re: [Samba] Samba4 DES enctypes

2013-06-12 Thread Andrew Bartlett
cryptosystem, because it's more than a decade since arcfour-hmac-md5 was introduced. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

[SCM] Samba Shared Repository - branch master updated

2013-06-12 Thread Andrew Bartlett
with LDAP_OTHER. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Andrew Bartlett abart...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Wed Jun 12 13:46:57 CEST 2013 on sn-devel-104 commit

Re: [Samba] Building Samba4 for Debian from Git

2013-06-11 Thread Andrew Bartlett
://lists.alioth.debian.org/mailman/listinfo/pkg-samba-maint Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https

Re: [Samba] Samba4 errors

2013-06-11 Thread Andrew Bartlett
release with the attached patch. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org From 1d610ce1a14f5a97c9b5cacca839b245df4bae6a Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher me

[SCM] Samba Shared Repository - branch master updated

2013-06-11 Thread Andrew Bartlett
SAMBA should also support as like Windows to compare with Windows standard. Set to 2000 until we add EA limits in the server. Reviewed-by: Jeremy Allison j...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org Autobuild-Date(master): Wed Jun 12 02:52:36 CEST

Re: [Samba] Certificates stop working after password change

2013-06-10 Thread Andrew Bartlett
prove it isn't a Samba issue by changing the local windows password on a standalone workstation. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go

Re: [Samba] Samba 4.0.6 Ubuntu Package Available

2013-06-10 Thread Andrew Bartlett
items listed in debian/TODO, and try and move this package to experimental! Please join the debian list and help out: http://lists.alioth.debian.org/mailman/listinfo/pkg-samba-maint Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer

Re: [Samba] Cross Compiling Samba 4.0.6 for ARM increases size of binaries

2013-06-10 Thread Andrew Bartlett
need is for the python checks, which are run against the current python environment, to be run via cross-answers. I've not worked out the details of how to do that yet. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer

Re: [Samba] Dial-In snap in not working

2013-06-09 Thread Andrew Bartlett
severely. What we need is to ensure we have (perhaps only for this attribute) a perfect forward and reverse encode of not-really-UTF8 to - not-really-UTF16 (perhaps not-really-UCS2), without regard for (with perfect transformation of) otherwise illegal sequences. Thanks, Andrew Bartlett

Re: [Samba] Dial-In snap in not working

2013-06-09 Thread Andrew Bartlett
. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] userAccountControl can't be set to 0x800002 (8388610, UF_ACCOUNTDISABLED | UF_PASSWORDEXPIRED):samldb: Unrecognized account type

2013-06-09 Thread Andrew Bartlett
On Sun, 2013-06-09 at 11:41 +0200, Matthias Dieter Wallnöfer wrote: Hi Andrew, please have a look at the two top-most patches in my master branch. Matthias These look good, I'm autobuilding these now! Thanks, Andrew Bartlett -- Andrew Bartletthttp

[SCM] Samba Shared Repository - branch master updated

2013-06-09 Thread Andrew Bartlett
036af07e863b09c6e84965ef288324cbac93de69 Author: Andrew Bartlett abart...@samba.org Date: Sat Jun 8 18:10:36 2013 +1000 .gitignore: Tidy up after removal of the autoconf build Reviewed-By: Jelmer Vernooij jel...@samba.org Autobuild-User(master): Andrew Bartlett abart...@samba.org

[SCM] Samba Shared Repository - branch master updated

2013-06-09 Thread Andrew Bartlett
userAccountControl UF_LOCKOUT and UF_PASSWORD_EXPIRED are never stored but rather are used for special semantics. UF_LOCKOUT performs an account lockout and UF_PASSWORD_EXPIRED forces password expiration. Reviewed-by: Andrew Bartlett abart...@samba.org

Re: [Samba] authentication problem with samba4 as a dcerpc server

2013-06-08 Thread Andrew Bartlett
Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] %S Macro seems broken in default service

2013-06-07 Thread Andrew Bartlett
://bugzilla.samba.org/show_bug.cgi?id=8935 That is, it wasn't anticipated that folks would use %S in this way, and the change avoids clients being able to consume memory as we re-interpret the service for each incoming name. Andrew Bartlett -- Andrew Bartletthttp

Re: [Samba] Samba 4.0.6 Ubuntu Package Available

2013-06-07 Thread Andrew Bartlett
://anonscm.debian.org/gitweb/?p=pkg-samba/samba.git;a=shortlog;h=refs/heads/samba_4.0 git://anonscm.debian.org/pkg-samba/samba.git (The reason I ask is that we need help finishing the work, and I'm trying to avoid double-work and get a finished package ready for everyone). Thanks, Andrew Bartlett

Re: [Samba] netlogon homes with Samba4 DC

2013-06-07 Thread Andrew Bartlett
] (because you can't make the home directory for the share to link to). Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read

Re: [Samba] Samba 4.0.6 Ubuntu Package Available

2013-06-07 Thread Andrew Bartlett
On Fri, 2013-06-07 at 17:44 -0500, Andrew Martin wrote: - Original Message - From: Andrew Bartlett abart...@samba.org To: Mike Ray m...@xes-inc.com Cc: samba@lists.samba.org Sent: Friday, June 7, 2013 5:07:12 PM Subject: Re: [Samba] Samba 4.0.6 Ubuntu Package Available

Re: [Samba] Certificates stop working after password change

2013-06-07 Thread Andrew Bartlett
to the validity of the certificate. Can you show the error shown on the KDC when the certificate is rejected? Or are you referring to some other certificate system? Andrew Bartlett -- Andrew Bartletthttp://samba.org

Re: [Samba] Samba 4.0.6 update - login issues

2013-06-07 Thread Andrew Bartlett
and network traces to investigate this further. Could it be a kerberos ticket expiring? Does it still happen if you upgrade a test member server to 3.6 or 4.0 (so we can narrow down the issue)? Thanks, Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet

<    5   6   7   8   9   10   11   12   13   14   >