[Samba] samba 4.0.3 compiling fails on freebsd 9.1

2013-03-11 Thread Joeri Vanthienen
Hi,

I have a problem compiling samba 4.0.3 on freebsd 9.1.

root@freebsd-san:/root/samba-4.0.3 # uname -a
FreeBSD freebsd-san 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue
Dec  4 09:23:10 UTC 2012
r...@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64
root@freebsd-san:/root/samba-4.0.3 #

I've installed the devel/libinotify port and there is a header file
located at /usr/local/include/sys/inotify.h.
Am I missing something?


[3409/3611] Linking default/source4/lib/policy/py-policy.so
[3410/3611] Linking default/source4/dsdb/samdb/ldb_modules/libldb-objectclass.so
[3411/3611] Linking default/source4/dsdb/samdb/ldb_modules/libldb-descriptor.so
[3412/3611] Linking default/source4/ntvfs/libntvfs.so
default/source4/ntvfs/sysdep/inotify_1.o: In function `inotify_setup':
inotify.c:(.text+0x508): undefined reference to `inotify_init'
default/source4/ntvfs/sysdep/inotify_1.o: In function `watch_destructor':
inotify.c:(.text+0x8d4): undefined reference to `inotify_rm_watch'
default/source4/ntvfs/sysdep/inotify_1.o: In function `inotify_watch':
inotify.c:(.text+0x9c5): undefined reference to `inotify_add_watch'
inotify.c:(.text+0xa21): undefined reference to `inotify_rm_watch'
inotify.c:(.text+0xac6): undefined reference to `inotify_rm_watch'
Waf: Leaving directory `/root/samba-4.0.3/bin'
Build failed:  - task failed (err #1):
{task: cc_link
inotify_1.o,vfs_smb2_6.o,vfs_ipc_12.o,ipc_rap_12.o,rap_server_12.o,pvfs_acl_1.o,pvfs_acl_xattr_3.o,vfs_cifs_5.o,vfs_simple_7.o,svfs_util_7.o,vfs_unixuid_1.o,sys_lease_3.o,sys_notify_2.o,ntvfs_base_1.o,ntvfs_generic_1.o,ntvfs_interface_1.o,ntvfs_util_1.o,pvfs_acl_nfs4_4.o,server_info_1.o,share_info_1.o,vfs_print_11.o,vfs_cifs_posix_9.o,svfs_util_9.o,vfs_posix_5.o,pvfs_util_5.o,pvfs_search_5.o,pvfs_dirlist_5.o,pvfs_fileinfo_5.o,pvfs_unlink_5.o,pvfs_mkdir_5.o,pvfs_open_5.o,pvfs_read_5.o,pvfs_flush_5.o,pvfs_write_5.o,pvfs_fsinfo_5.o,pvfs_qfileinfo_5.o,pvfs_setfileinfo_5.o,pvfs_rename_5.o,pvfs_resolve_5.o,pvfs_shortname_5.o,pvfs_lock_5.o,pvfs_oplock_5.o,pvfs_wait_5.o,pvfs_seek_5.o,pvfs_ioctl_5.o,pvfs_xattr_5.o,pvfs_streams_5.o,pvfs_notify_5.o,pvfs_sys_5.o,xattr_system_5.o,vfs_nbench_14.o,init_1.o,brlock_1.o,brlock_tdb_1.o,opendb_1.o,opendb_tdb_1.o,notify_1.o
- libntvfs.so}
*** [all] Error code 1

Stop in /root/samba-4.0.3.

Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba 4.0.3: ads_sasl_spnego_krb5_bind failed with Did not find a plugin for ccache_ops [solaris]

2013-03-08 Thread Joeri Vanthienen
Hi everybody,

I've compiled samba 4.0.3 with gcc 4.4.4 on openindiana.
But now I have a problem joining the domain

/usr/local/samba/bin/net ads join -d 10 -U jvanthienen
...
ads_sasl_spnego_krb5_bind failed with:  Miscellaneous failure (see
text) : Did not find a plugin for ccache_ops, calling kinit
...

Is this ccache plugin really needed? Can I disable this and how ? any idea?

More details:
root@openindiana-san:~# /usr/local/samba/sbin/samba --show-build
Samba version: 4.0.3
Build environment:
   Build host:  SunOS openindiana-san 5.11 oi_151a7 i86pc i386 i86pc
Paths:
   BINDIR: /usr/local/samba/bin
   SBINDIR: /usr/local/samba/sbin
   CONFIGFILE: /usr/local/samba/etc/smb.conf
   NCALRPCDIR: /usr/local/samba/var/run/ncalrpc
   LOGFILEBASE: /usr/local/samba/var
   LMHOSTSFILE: /usr/local/samba/etc/lmhosts
   DATADIR: /usr/local/samba/share
   MODULESDIR: /usr/local/samba/lib
   LOCKDIR: /usr/local/samba/var/lock
   STATEDIR: /usr/local/samba/var/locks
   CACHEDIR: /usr/local/samba/var/cache
   PIDDIR: /usr/local/samba/var/run
   PRIVATE_DIR: /usr/local/samba/private
   SWATDIR: /usr/local/samba/share/swat
   CODEPAGEDIR: /usr/local/samba/share/codepages
   SETUPDIR: /usr/local/samba/share/setup
   WINBINDD_SOCKET_DIR: /usr/local/samba/var/run/winbindd
   WINBINDD_PRIVILEGED_SOCKET_DIR: /usr/local/samba/var/lib/winbindd_privileged
   NTP_SIGND_SOCKET_DIR: /usr/local/samba/var/lib/ntp_signd



/usr/local/samba/bin/net ads join -d 10 -U jvanthienen

...
KDC time offset is 1 seconds
Found SASL mechanism GSS-SPNEGO
ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3
ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
ads_sasl_spnego_bind: got server principal name =
not_defined_in_RFC4178@please_ignore
ads_sasl_spnego_krb5_bind failed with:  Miscellaneous failure (see
text) : Did not find a plugin for ccache_ops, calling kinit
kerberos_kinit_password: as jvanthie...@home.roniesoft.be using
[MEMORY:net_ads] as ccache and config
[/usr/local/samba/var/lock/smb_krb5/krb5.conf.HOME]
ads_setup_sasl_wrapping() failed: NT_STATUS_NOT_SUPPORTED
kinit succeeded but ads_sasl_spnego_krb5_bind failed: NT_STATUS_NOT_SUPPORTED
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name  : 'HOME'
dns_domain_name  : 'home.roniesoft.be'
forest_name  : 'home.roniesoft.be'
dn   : NULL
domain_sid   : *
domain_sid   :
S-1-5-21-1844237615-1580818891-1343024091
modified_config  : 0x00 (0)
error_string : 'failed to connect to AD:
NT_STATUS_NOT_SUPPORTED'
domain_is_ad : 0x01 (1)
result   : WERR_GENERAL_FAILURE
Failed to join domain: failed to connect to AD: NT_STATUS_NOT_SUPPORTED
return code = -1
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] no network interfaces found on OpenIndiana (Illumos)

2013-03-07 Thread Joeri Vanthienen
Hi Tris,

Thank you for your reply! Really helpful.
I'm suspecting that my problem had something to do with virtualbox.
I deployed it today on a normal physical machine and it worked
immediatly, without the interfaces line.
I'll try again the interfaces line on my virtual machine.

Thanks.
joeri



On Thu, Mar 7, 2013 at 11:15 AM, Tris Mabbs
tm-samba201...@firstgrade.co.uk wrote:
 Hiya Joeri,

 I had exactly the same problem with OpenSolaris - would not find the
 interfaces.

 However I found that if I explicitly defined the interfaces in the smb.conf
 file:

 interfaces = if.ip.add.ress/netmask_bits
 if.ip.other.address/netmask_bits

 Samba was quite happy to pick that up.

 I had the same problem with the ISC DHCP server, but there I had actually to
 modify code to get it to work.  It does seem that there's something odd in
 the way some Solaris versions provide access to the interface lists, but
 I've never had time to get fully to the bottom of it (and I'm afraid I can't
 remember exactly what I had to change in the ISC DHCP server to get it to
 work).
 Something perhaps to be picked up at some point for investigation by the
 developers, but it's probably much easier for you right now just to try
 adding an interfaces line to your smb.conf and see whether that fixes it
 for you - hopefully it will.

 Hope that helps!

 Cheers,

 Tris.

 Ps.  So the interfaces line you'd want (IPv4) would be something like
 interfaces 192.168.250.8/24 127.0.0.1/8 or interfaces
 192.168.250.8/255.255.255.0 127.0.0.1/255.0.0.0.

 -Original Message-
 From: Joeri Vanthienen [mailto:m...@joerivanthienen.be]
 Sent: 06 March 2013 10:42
 To: samba@lists.samba.org
 Subject: [Samba] no network interfaces found on OpenIndiana (Illumos)

 Hi,

 I've downloaded the samba 3.6.12 OpenCSW package.
 I joined openindiana to the the active directory, winbind seems to work
 fine, I see all the users with wbinfo -u.
 However, my samba server is not starting. It seems that there is no network
 card found.

 2013/03/06 10:40:39.068405,  0] lib/interface.c:543(load_interfaces)
   WARNING: no network interfaces found
 [2013/03/06 10:40:39.072795,  0] smbd/server.c:1082(main)
   standard input is not a socket, assuming -D option ...
 [2013/03/06 10:40:39.205210,  0] smbd/server.c:746(open_sockets_smbd)
   open_sockets_smbd: No sockets available to bind to.

 Is there some problem that the get_interfaces(talloc_tos(), ifaces); call
 returns  no interfaces on solaris/openindiana ?
 Any idea?

 I sure have interfaces:
 root@openindiana:/# ifconfig -a
 lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu
 8232 index 1
 inet 127.0.0.1 netmask ff00
 e1000g0: flags=1004843UP,BROADCAST,RUNNING,MULTICAST,DHCP,IPv4 mtu
 1500 index 3
 inet 192.168.250.8 netmask ff00 broadcast 192.168.250.255
 ether 8:0:27:bd:35:de
 lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL mtu
 8252 index 1
 inet6 ::1/128
 e1000g0: flags=20002004841UP,RUNNING,MULTICAST,DHCP,IPv6 mtu 1500 index 3
 inet6 fe80::a00:27ff:febd:35de/10
 ether 8:0:27:bd:35:de


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] winbind authentication FAILED with error NT_STATUS_NO_SUCH_USER [samba 3.6.12/AD/openindiana(illumos)]

2013-03-07 Thread Joeri Vanthienen
Hi,

My OpenIndiana (opensolaris) machine is joined to Active Directory.
I'm using samba 3.6.12 from OpenCSW.
wbinfo -u is working fine, getent was not working in the beginning,
but after some fiddling with libraries it was working ( I had to
create the following two symbolic links, not sure if they both are
correct)

/lib/libnss_winbind.so - /opt/csw/lib/libnss_winbind.so.1
/lib/nss_winbind.so.1 - /opt/csw/lib/libnss_winbind.so.1


root@openindiana-san:/# cat /etc/nsswitch.conf | grep winbind
passwd: files winbind
group:  files winbind

root@openindiana-san:/# /opt/csw/bin/wbinfo -u | grep jvanthienen
HOME+jvanthienen

root@openindiana-san:/# getent passwd | grep jvanthienen
HOME+jvanthienen:*:11016:11006:Joeri
Vanthienen:/home/HOME/jvanthienen:/bin/false

Problem is that I can't authenticate now. It seems that samba/winbind
can't find the user.
Still some problem with a missed linked library or ... ?
Any idea is welcome! Thanks.


cat /var/samba/log/1stpc07.log

[2013/03/07 12:27:12.062823,  5] auth/auth_util.c:110(make_user_info_map)
  Mapping user [HOME]\[jvanthienen] from workstation [1STPC07]
[2013/03/07 12:27:12.063021,  5] auth/user_info.c:59(make_user_info)
  attempting to make a user_info for jvanthienen (jvanthienen)
[2013/03/07 12:27:12.063072,  5] auth/user_info.c:70(make_user_info)
  making strings for jvanthienen's user_info struct
[2013/03/07 12:27:12.063109,  5] auth/user_info.c:87(make_user_info)
  making blobs for jvanthienen's user_info struct
[2013/03/07 12:27:12.063146, 10] auth/user_info.c:123(make_user_info)
  made a user_info for jvanthienen (jvanthienen)
[2013/03/07 12:27:12.063182,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[HOME]\[jvanthienen]@[1STPC07] with the new password interface
[2013/03/07 12:27:12.063222,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is: [HOME]\[jvanthienen]@[1STPC07]
[2013/03/07 12:27:12.063260, 10] auth/auth.c:231(check_ntlm_password)
  check_ntlm_password: auth_context challenge created by NTLMSSP
callback (NTLM2)
[2013/03/07 12:27:12.063296, 10] auth/auth.c:233(check_ntlm_password)
  challenge is:
[2013/03/07 12:27:12.063329,  5] ../lib/util/util.c:415(dump_data)
  [] 58 71 97 2B 78 85 EA CAXq.+x.êÊ
[2013/03/07 12:27:12.063401, 10] auth/auth_builtin.c:44(check_guest_security)
  Check auth for: [jvanthienen]
[2013/03/07 12:27:12.063436, 10] auth/auth.c:259(check_ntlm_password)
  check_ntlm_password: guest had nothing to say
[2013/03/07 12:27:12.063476, 10] auth/auth_sam.c:75(auth_samstrict_auth)
  Check auth for: [jvanthienen]
[2013/03/07 12:27:12.063511,  8] lib/util.c:1521(is_myname)
  is_myname(HOME) returns 0
[2013/03/07 12:27:12.063547,  6] auth/auth_sam.c:88(auth_samstrict_auth)
  check_samstrict_security: HOME is not one of my local names
(ROLE_DOMAIN_MEMBER)
[2013/03/07 12:27:12.063585, 10] auth/auth.c:259(check_ntlm_password)
  check_ntlm_password: sam had nothing to say
[2013/03/07 12:27:12.063624, 10] auth/auth_winbind.c:50(check_winbind_security)
  Check auth for: [jvanthienen]
[2013/03/07 12:27:12.063660,  4] smbd/sec_ctx.c:214(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2013/03/07 12:27:12.063698,  4] smbd/uid.c:460(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2013/03/07 12:27:12.063734,  4] smbd/sec_ctx.c:314(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2013/03/07 12:27:12.063772,  5]
../libcli/security/security_token.c:53(security_token_debug)
  Security token: (NULL)
[2013/03/07 12:27:12.063806,  5] auth/token_util.c:527(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2013/03/07 12:27:12.081737,  4] smbd/sec_ctx.c:422(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2013/03/07 12:27:12.081797,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user HOME+jvanthienen
[2013/03/07 12:27:12.081833,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is home+jvanthienen
[2013/03/07 12:27:12.081956,  5] lib/username.c:124(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as given is HOME+jvanthienen
[2013/03/07 12:27:12.082073,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is HOME+JVANTHIENEN
[2013/03/07 12:27:12.082188,  5] lib/username.c:143(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in home+jvanthienen
[2013/03/07 12:27:12.082229,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [HOME+jvanthienen]!
[2013/03/07 12:27:12.082267,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user jvanthienen
[2013/03/07 12:27:12.082302,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is jvanthienen
[2013/03/07 12:27:12.082414,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is JVANTHIENEN

[Samba] no network interfaces found on OpenIndiana (Illumos)

2013-03-06 Thread Joeri Vanthienen
Hi,

I've downloaded the samba 3.6.12 OpenCSW package.
I joined openindiana to the the active directory, winbind seems to
work fine, I see all the users with wbinfo -u.
However, my samba server is not starting. It seems that there is no
network card found.

2013/03/06 10:40:39.068405,  0] lib/interface.c:543(load_interfaces)
  WARNING: no network interfaces found
[2013/03/06 10:40:39.072795,  0] smbd/server.c:1082(main)
  standard input is not a socket, assuming -D option
...
[2013/03/06 10:40:39.205210,  0] smbd/server.c:746(open_sockets_smbd)
  open_sockets_smbd: No sockets available to bind to.

Is there some problem that the get_interfaces(talloc_tos(), ifaces);
call returns  no interfaces on solaris/openindiana ?
Any idea?

I sure have interfaces:
root@openindiana:/# ifconfig -a
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu
8232 index 1
inet 127.0.0.1 netmask ff00
e1000g0: flags=1004843UP,BROADCAST,RUNNING,MULTICAST,DHCP,IPv4 mtu
1500 index 3
inet 192.168.250.8 netmask ff00 broadcast 192.168.250.255
ether 8:0:27:bd:35:de
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL mtu
8252 index 1
inet6 ::1/128
e1000g0: flags=20002004841UP,RUNNING,MULTICAST,DHCP,IPv6 mtu 1500 index 3
inet6 fe80::a00:27ff:febd:35de/10
ether 8:0:27:bd:35:de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Office 2010, location is not trusted in samba 3.6.x

2012-10-31 Thread Joeri Vanthienen
Hi,

Everytime a user opens a excel,word,... document on the share office
complains about the file is beying downloaded from the internet and is not
secure. After a push on the allow or edit button, the user can continue his
work.

I know you can add the UNC location to your trusted sites or location
within internet explorer or office trust center.

When the UNC path is a windows server. There is no warning.
So my question, what is the difference?
I've turned on signing, I can see that the packages are signed between
samba and my windows 7 computer. But this doesn't resolve the problem.

Also using the VFS module streams_xattr is not working.

Is there any solution apart from adding the UNC path as trusted on the
client?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] [SAMBA] shadow_copy2 is not working for me on samba 3.6.7 and btrfs volume

2012-08-24 Thread Joeri Vanthienen
Hi,

I'm running samba 3.6.7 on a linux server:

root@SRVUBUNTU:/btrfs/samba/.btrfs# smbd -V
Version 3.6.7
root@SRVUBUNTU:/btrfs/samba/.btrfs# uname -a
Linux SRVUBUNTU 3.5.2 #1 SMP Fri Aug 17 15:26:57 CEST 2012 x86_64 x86_64
x86_64 GNU/Linux

I have a base dir to share with samba on /btrfs/samba

root@SRVUBUNTU:/btrfs/samba# ls -l
total 0
-rw-r--r-- 1 root root 0 Aug 24 13:07 a
-rw-r--r-- 1 root root 0 Aug 24 13:07 b

My snapshots are stored inside this basedir in the folder .btrfs

root@SRVUBUNTU:/btrfs/samba/.btrfs# ls -l
total 0
drwxr-xr-x 1 root root 12 Aug 24 13:15 @GMT-2012.08.24-15.15.25
drwxr-xr-x 1 root root 16 Aug 24 13:07 @GMT-2012.08.24-15.26.40

This is my smb.conf
---
[data]
   vfs objects = shadow_copy2
   shadow:snapdir = /btrfs/samba/.btrfs
   shadow:basedir = /btrfs/samba
   read only = no
   path = /btrfs/samba/
   browsable = yes
   guest ok = yes
   follow symlinks = yes
   wide links  = yes
   unix extensions = no


I can't see the snapshots in previous versions, however I can
navigate/browse inside the windows 7 client to the (hidden) snapshot
directory, so it seems not to be a permission issue.
This worked previously fine for me on a freebsd server with zfs volumes.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] default extended file attributes on ZFS [samba 3.6.5 / freebsd ]

2012-07-24 Thread Joeri Vanthienen
I'm running the latest FreeBSD 10.0-CURRENT with samba 3.6.5.
I'm sharing some folders from a ZFS file system

properties of the zfs filesystem:
tank/users  aclmode   passthrough  inherited from
tank
tank/users  aclinheritpassthrough  received

When I create a file via a windows client on the shared volume following
ACL is applied:

getfacl New\ Text\ Document.txt
# file: New Text Document.txt
# owner: administrator
# group: domain users
owner@:rw-p--aARWcCo-:--:allow
group@:rw-p--a-R-c---:--:allow
 everyone@:--a-R-c---:--:allow

 ls -l New\ Text\ Document.txt
-rw-rw+ 1 administrator  domain users  0 Jul 24 10:46 New Text
Document.txt

I don't want to see the everyone listed in the ACL ( with following aces:
read attributes, Read extended attrbiutes, Read permissions) on the windows
clients.
Is this  everyone@:--a-R-c---:--:allow implemented by FreeBSD by
default? Can I filter this or change the default extended attributes? Is
this defined by the the NFSv4 standard?
Default umask on freebsd is 022.
I'm using the zfsacl vfs objects module.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba