[Bug 993551] [NEW] Server installer skips manual networking configuration questions

2012-05-02 Thread Aaron J. Zirbes
Public bug reported:

When installing Ubuntu Server 12.04 64bit onto a fresh VMware ESXi
virtual instance, and choosing to configure the network manually, after
entering the IP address, the setup process skips the routing, subnet,
and DNS server information.

I've tried this three times now. It appears that there is a DHCP service
running in the background trying to overwrite the settings as I wrote
them as the options would flash by but only briefly.

** Affects: base-installer (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/993551

Title:
  Server installer skips manual networking configuration questions

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/base-installer/+bug/993551/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 796322] Re: Empathy keeps on losing Google Talk's Application-Specific Password for Applications

2012-03-08 Thread Aaron J. Zirbes
*** This bug is a duplicate of bug 754569 ***
https://bugs.launchpad.net/bugs/754569

Agree w/ #4.  This is NOT a duplicate of bug #754569.

This is something to do with the way that empathy links account settings
to the gnome keystore.

It's still broken, and has nothing to do with two-step authentication.
I'm using a EDU google domain, and it has a dedicated desktop client
password, and that password works fine until I edit Empathy, then when I
go back in next time, everything is gone.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/796322

Title:
  Empathy keeps on losing Google Talk's Application-Specific Password
  for Applications

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/empathy/+bug/796322/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 807416] Re: Security bug in xml-security-c may require rebuilding of this package

2011-08-03 Thread Aaron J. Zirbes
RE: sbeattie,

If this is a bug to to an upstream linked library, only a re-compile and 
re-package once
libxml-security-c15 1.5.1-3+squeeze1build0.10.04.1 is installed is required?

Right?  No need for a debdiff?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/807416

Title:
  Security bug in xml-security-c may require rebuilding of this package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shibboleth-sp2/+bug/807416/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 598472] Re: shibd crashes silently on SAML2 Response decoding

2010-09-07 Thread Aaron J. Zirbes
Confirmed, Here's my backtrace.

GNU gdb (GDB) 7.1-ubuntu
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type show copying
and show warranty for details.
This GDB was configured as i486-linux-gnu.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/sbin/shibd...(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/sbin/shibd -t
[Thread debugging using libthread_db enabled]

Program received signal SIGILL, Illegal instruction.
0x00c8c3df in xercesc_3_1::RangeToken::expand(unsigned int) () from 
/usr/lib/libxerces-c-3.1.so
(gdb) bt
#0  0x00c8c3df in xercesc_3_1::RangeToken::expand(unsigned int) () from 
/usr/lib/libxerces-c-3.1.so
#1  0x00c8c5c0 in xercesc_3_1::RangeToken::addRange(int, int) () from 
/usr/lib/libxerces-c-3.1.so
#2  0x00c8d444 in 
xercesc_3_1::RangeToken::complementRanges(xercesc_3_1::RangeToken*, 
xercesc_3_1::TokenFactory*, xercesc_3_1::MemoryManager*) () from 
/usr/lib/libxerces-c-3.1.so
#3  0x00c9c72b in 
xercesc_3_1::XMLRangeFactory::buildRanges(xercesc_3_1::RangeTokenMap*) () from 
/usr/lib/libxerces-c-3.1.so
#4  0x00c8e02e in xercesc_3_1::RangeTokenMap::buildTokenRanges() () from 
/usr/lib/libxerces-c-3.1.so
#5  0x00c8f20d in xercesc_3_1::XMLInitializer::initializeRangeTokenMap() () 
from /usr/lib/libxerces-c-3.1.so
#6  0x00caef4b in xercesc_3_1::XMLInitializer::initializeStaticData() () from 
/usr/lib/libxerces-c-3.1.so
#7  0x00c84b9b in xercesc_3_1::XMLPlatformUtils::Initialize(char const*, char 
const*, xercesc_3_1::PanicHandler*, xercesc_3_1::MemoryManager*) () from 
/usr/lib/libxerces-c-3.1.so
#8  0x00853c8e in xmltooling::XMLToolingInternalConfig::init() () from 
/usr/lib/libxmltooling.so.4
#9  0x00350382 in opensaml::SAMLInternalConfig::init(bool) () from 
/usr/lib/libsaml.so.6
#10 0x00a505b3 in shibsp::SPConfig::init(char const*, char const*) () from 
/usr/lib/libshibsp.so.4
#11 0x080497d5 in ?? ()
#12 0x01082bd6 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#13 0x08049311 in ?? ()
(gdb)

-- 
shibd crashes silently on SAML2 Response decoding
https://bugs.launchpad.net/bugs/598472
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 598472] Re: shibd crashes silently on SAML2 Response decoding

2010-09-07 Thread Aaron J. Zirbes
Installing
http://security.ubuntu.com/ubuntu/pool/universe/x/xerces-c/libxerces-c3.1_3.1.1-1_i386.deb
fixes this for me as well

-- 
shibd crashes silently on SAML2 Response decoding
https://bugs.launchpad.net/bugs/598472
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2010-05-18 Thread Aaron J. Zirbes
Bump.

Just did a few fresh installs of lucid and this install script iterated
through all 200+ accounts in the LDAP directory.  Each account takes 3
seconds causing the total install time to take over 5 minutes.

THIS IS A BAD THING. THIS NEEDS TO BE FIXED.

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2010-05-18 Thread Aaron J. Zirbes
Bump.

Just did a few fresh installs of lucid and this install script iterated
through all 200+ accounts in the LDAP directory.  Each account takes 3
seconds causing the total install time to take over 5 minutes.

THIS IS A BAD THING. THIS NEEDS TO BE FIXED.

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 541520] Re: Using incorrect JVM Garbage Collector

2010-04-21 Thread Aaron J. Zirbes

I'm OK with moving the -Xmx128M parameter out onto one of the comment
lines as this is a commonly known and understood parameter.  Most google
(bing?) searches will advise you to adjusting this parameter when you
come upon memory problems.

If we want to ensure that we don't assign UseConcMarkSweepGC on
single-core processors, the installer script could check for this by
doing something sneaky like...

CORE_COUNT=`grep -E ^processor\s*: /proc/cpuinfo | wc -l`
if ((( $CORE_COUNT  1 ))) then
JAVA_OPTS=$JAVA_OPTS -XX:+UseConcMarkSweepGC
fi

As I've never written post-install scripts I'm not sure how hard this
would be, but it's a thought.

Theoretically it could be added to /etc/init.d/tomcat6...

(P.S. Don't trust my BASH syntax, I didn't test it.  Treat it as
pseudo-code.)

--
Aaron

Gabriel Nell wrote:
 The point that we know something the JVM can't know, eg, that this JVM
 is running a web server, is fair. I'm still not convinced that
 specifying the CMS collector is the right application of this knowledge,
 and I'm new to Ubuntu (from a contributor standpoint, anyway) so I don't
 know what the project goals are for the default configuration. But for
 now let me move down what I hope is a fruitful path. It sounds like (and
 please correct me if I'm wrong) we want to choose settings that:

 1) at a minimum, work (eg, after running apt-get, tomcat actually boots up 
 and serves requests)
 2) has reasonable defaults to suit the sort of hardware we expect people to 
 run web servers on

 Currently our defaults are:

 -Xmx128M -XX:+UseConcMarkSweepGC

 Which satisfies #1, but I still think is not great for #2. Maybe as you
 alluded we'd do better by not specifying the maximum heap size? The
 rationale was that 64MB is not usually enough, and that made sense under
 JDK1.4, when this was the default heap size. However it looks like in
 1.5 and later, the heap selection was changed to be based on the amount
 of available RAM

 ***
 initial heap size:
 Larger of 1/64th of the machine's physical memory on the machine or some 
 reasonable minimum. Before J2SE 5.0, the default initial heap size was a 
 reasonable minimum, which varies by platform. You can override this default 
 using the -Xms command-line option.

 maximum heap size:
 Smaller of 1/4th of the physical memory or 1GB. Before J2SE 5.0, the default 
 maximum heap size was 64MB. You can override this default using the -Xmx 
 command-line option.
 ***

 So if we don't give any heap parameters to the JVM:

 - The heap will be at least 128MB (satisfy goal #1) on any machine with 512MB 
 or more of RAM
 - The JVM is free to choose a heap much larger than 128MB, based on the 
 available memory (satisfy goal #2)

 For this reason I'd suggest we remove the -Xmx128M portion from the
 command line.

 References:
 http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html#par_gc.ergonomics.default_size
 http://java.sun.com/javase/6/docs/technotes/guides/vm/gc-ergonomics.html
 http://java.sun.com/docs/hotspot/gc5.0/ergo5.html



-- 
Using incorrect JVM Garbage Collector
https://bugs.launchpad.net/bugs/541520
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to tomcat6 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 541520] Re: Using incorrect JVM Garbage Collector

2010-04-21 Thread Aaron J. Zirbes

I'm OK with moving the -Xmx128M parameter out onto one of the comment
lines as this is a commonly known and understood parameter.  Most google
(bing?) searches will advise you to adjusting this parameter when you
come upon memory problems.

If we want to ensure that we don't assign UseConcMarkSweepGC on
single-core processors, the installer script could check for this by
doing something sneaky like...

CORE_COUNT=`grep -E ^processor\s*: /proc/cpuinfo | wc -l`
if ((( $CORE_COUNT  1 ))) then
JAVA_OPTS=$JAVA_OPTS -XX:+UseConcMarkSweepGC
fi

As I've never written post-install scripts I'm not sure how hard this
would be, but it's a thought.

Theoretically it could be added to /etc/init.d/tomcat6...

(P.S. Don't trust my BASH syntax, I didn't test it.  Treat it as
pseudo-code.)

--
Aaron

Gabriel Nell wrote:
 The point that we know something the JVM can't know, eg, that this JVM
 is running a web server, is fair. I'm still not convinced that
 specifying the CMS collector is the right application of this knowledge,
 and I'm new to Ubuntu (from a contributor standpoint, anyway) so I don't
 know what the project goals are for the default configuration. But for
 now let me move down what I hope is a fruitful path. It sounds like (and
 please correct me if I'm wrong) we want to choose settings that:

 1) at a minimum, work (eg, after running apt-get, tomcat actually boots up 
 and serves requests)
 2) has reasonable defaults to suit the sort of hardware we expect people to 
 run web servers on

 Currently our defaults are:

 -Xmx128M -XX:+UseConcMarkSweepGC

 Which satisfies #1, but I still think is not great for #2. Maybe as you
 alluded we'd do better by not specifying the maximum heap size? The
 rationale was that 64MB is not usually enough, and that made sense under
 JDK1.4, when this was the default heap size. However it looks like in
 1.5 and later, the heap selection was changed to be based on the amount
 of available RAM

 ***
 initial heap size:
 Larger of 1/64th of the machine's physical memory on the machine or some 
 reasonable minimum. Before J2SE 5.0, the default initial heap size was a 
 reasonable minimum, which varies by platform. You can override this default 
 using the -Xms command-line option.

 maximum heap size:
 Smaller of 1/4th of the physical memory or 1GB. Before J2SE 5.0, the default 
 maximum heap size was 64MB. You can override this default using the -Xmx 
 command-line option.
 ***

 So if we don't give any heap parameters to the JVM:

 - The heap will be at least 128MB (satisfy goal #1) on any machine with 512MB 
 or more of RAM
 - The JVM is free to choose a heap much larger than 128MB, based on the 
 available memory (satisfy goal #2)

 For this reason I'd suggest we remove the -Xmx128M portion from the
 command line.

 References:
 http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html#par_gc.ergonomics.default_size
 http://java.sun.com/javase/6/docs/technotes/guides/vm/gc-ergonomics.html
 http://java.sun.com/docs/hotspot/gc5.0/ergo5.html



-- 
Using incorrect JVM Garbage Collector
https://bugs.launchpad.net/bugs/541520
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2010-04-12 Thread Aaron J. Zirbes
As our organization is moving away from NT4 style domains, our Samba
servers are being moved into AD, and I'll no longer be able to test this
bug.  (It also will no longer affect me)

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 558793] Re: net ads dns register fails in 2008 R2 domain

2010-04-12 Thread Aaron J. Zirbes
[global]

   # Name
   server string = Test Samba Server
   netbios name = %h

   # AD Membership pointers
   workgroup = AD
   security = ADS
   realm = AD.UMN.EDU
   local master = no

   # NTLMv2 Security options
   client ntlmv2 auth = yes
   ntlm auth = no

   # Active Directory user mapping options
   # Commented out options can be enabled if AD turns on Unix Extenstions for AD
   idmap backend = tdb
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   idmap config AD:backend = rid
   idmap config AD:range = 16777216-33554431


   template shell = /bin/bash
   template homedir = /home/%D/%U
   winbind separator = +
   winbind use default domain = yes
   winbind offline logon = true
   winbind enum users = no
   winbind enum groups = no
   winbind refresh tickets = true

   # Increased throughput
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   # Don't share printers
   load printers = no

-- 
net ads dns register fails in 2008 R2 domain
https://bugs.launchpad.net/bugs/558793
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 559624] Re: CUPS will not function as network Print Server

2010-04-12 Thread Aaron J. Zirbes
Ahh.  Noted.  I was trying to confer that it was reproducible.

As to your second question. I discovered the bug using Beta 1.
I assume that `apt-get dist-upgrade` will bring it up to beta 2?

Just to ensure that this wasn't an issue, I just did a fresh install 
from the beta2 ISO.

I still get the same problem.  Same install steps.

Thanks in advance,
--
Aaron

kurt belgrave wrote:
 You should not confirm your own bugs, also is it beta 1 or 2?



-- 
CUPS will not function as network Print Server
https://bugs.launchpad.net/bugs/559624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 418527] Re: Unnecessary dependencies in open-vm-tools

2010-04-12 Thread Aaron J. Zirbes
Could it be setup so that
'sudo apt-get install open-vm-tools' 

doesn't pick the x-packages automatically?

Having to run

sudo apt-get install --no-install-recommends open-vm-tools

seems to be a bit of a hack work around.  Especially since this package
claims to be command-line tools.

Thoughts?

-- 
Unnecessary dependencies in open-vm-tools
https://bugs.launchpad.net/bugs/418527
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2010-04-12 Thread Aaron J. Zirbes
As our organization is moving away from NT4 style domains, our Samba
servers are being moved into AD, and I'll no longer be able to test this
bug.  (It also will no longer affect me)

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 559624] Re: CUPS will not function as network Print Server

2010-04-12 Thread Aaron J. Zirbes
I think this stems from the CUPS web server not requesting authorization
for secured web pages.

When I remove all of the Require user ... lines from cupsd.conf, I can
see the web interface, add printers, view jobs, print test pages, etc...

Unfortunately this is not a viable work-around as it opens up the admin
interface to anyone who can type in the IP.

I have another question... is AuthType Default a viable option?  The
man page doesn't list it but it's in the default cupsd.conf file quite a
bit.

-- 
CUPS will not function as network Print Server
https://bugs.launchpad.net/bugs/559624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 558793] Re: net ads dns register fails in 2008 R2 domain

2010-04-12 Thread Aaron J. Zirbes
[global]

   # Name
   server string = Test Samba Server
   netbios name = %h

   # AD Membership pointers
   workgroup = AD
   security = ADS
   realm = AD.UMN.EDU
   local master = no

   # NTLMv2 Security options
   client ntlmv2 auth = yes
   ntlm auth = no

   # Active Directory user mapping options
   # Commented out options can be enabled if AD turns on Unix Extenstions for AD
   idmap backend = tdb
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   idmap config AD:backend = rid
   idmap config AD:range = 16777216-33554431


   template shell = /bin/bash
   template homedir = /home/%D/%U
   winbind separator = +
   winbind use default domain = yes
   winbind offline logon = true
   winbind enum users = no
   winbind enum groups = no
   winbind refresh tickets = true

   # Increased throughput
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   # Don't share printers
   load printers = no

-- 
net ads dns register fails in 2008 R2 domain
https://bugs.launchpad.net/bugs/558793
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 559624] [NEW] 403 Error when CUPS Listens on *:631

2010-04-09 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: cups

On default install of CUPS in Ubuntu 10.4 Server when trying to
configure Ubuntu as a Print server I am unable to browse to CUPS web
management interface remotely.

I merely change 
Listen: localhost:631
to
Listen: *:631

When opening a web browser, I see:

403 Forbidden

Nothing in the logs

** Affects: cups (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: lucid

-- 
403 Error when CUPS Listens on *:631
https://bugs.launchpad.net/bugs/559624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 559624] Re: 403 Error when CUPS Listens on *:631

2010-04-09 Thread Aaron J. Zirbes
LogLevel debug2

d [09/Apr/2010:17:02:59 -0500] cupsdAcceptClient(lis=0x7fe81d3e1d40(7)) 
Clients=0
D [09/Apr/2010:17:02:59 -0500] cupsdAcceptClient: 11 from 160.94.224.1:631 
(IPv4)
d [09/Apr/2010:17:02:59 -0500] cupsdAddSelect(fd=11, read_cb=0x7fe81c477010, 
write_cb=(nil), data=0x7fe81d40b000)
d [09/Apr/2010:17:02:59 -0500] cupsdCheckJobs: 0 active jobs, sleeping=0, 
reload=0
d [09/Apr/2010:17:02:59 -0500] cupsdReadClient(con=0x7fe81d40b000(11)) 
con-http.error=0 con-http.used=0, con-http.state=0 
con-data_encoding=HTTP_ENCODE_LENGTH, con-data_remaining=0, con-file=-1
D [09/Apr/2010:17:02:59 -0500] cupsdReadClient: 11 GET / HTTP/1.1
D [09/Apr/2010:17:02:59 -0500] cupsdSetBusyState: Active clients
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: uri = /...
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location CUPS_INTERNAL_BROWSE_ACL 
Limit 0
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location /admin/conf Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location /admin Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location / Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: best = /
d [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: con-uri=/, 
con-best=0x7fe81d3e2120(/)
d [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: Authorization=
D [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: No authentication data provided.
d [09/Apr/2010:17:02:59 -0500] cupsdIsAuthorized: con-uri=/, 
con-best=0x7fe81d3e2120(/)
d [09/Apr/2010:17:02:59 -0500] cupsdIsAuthorized: level=CUPSD_AUTH_ANON, 
type=None, satisfy=CUPSD_AUTH_SATISFY_ALL, num_names=0
d [09/Apr/2010:17:02:59 -0500] cupsdIsAuthorized: auth=CUPSD_AUTH_DENY...
d [09/Apr/2010:17:02:59 -0500] cupsdSendError(con=0x7fe81d40b000(11), code=403, 
auth_type=0
D [09/Apr/2010:17:02:59 -0500] cupsdCloseClient: 11
D [09/Apr/2010:17:02:59 -0500] cupsdSetBusyState: Not busy
d [09/Apr/2010:17:02:59 -0500] cupsdRemoveSelect(fd=11)
d [09/Apr/2010:17:02:59 -0500] cupsdAcceptClient(lis=0x7fe81d3e1d40(7)) 
Clients=0
D [09/Apr/2010:17:02:59 -0500] cupsdAcceptClient: 11 from 160.94.224.1:631 
(IPv4)
d [09/Apr/2010:17:02:59 -0500] cupsdAddSelect(fd=11, read_cb=0x7fe81c477010, 
write_cb=(nil), data=0x7fe81d40b000)
d [09/Apr/2010:17:02:59 -0500] cupsdReadClient(con=0x7fe81d40b000(11)) 
con-http.error=0 con-http.used=0, con-http.state=0 
con-data_encoding=HTTP_ENCODE_LENGTH, con-data_remaining=0, con-file=-1
D [09/Apr/2010:17:02:59 -0500] cupsdReadClient: 11 GET /cups.css HTTP/1.1
D [09/Apr/2010:17:02:59 -0500] cupsdSetBusyState: Active clients
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: uri = /cups.css...
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location CUPS_INTERNAL_BROWSE_ACL 
Limit 0
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location /admin/conf Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location /admin Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location / Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: best = /
d [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: con-uri=/cups.css, 
con-best=0x7fe81d3e2120(/)
d [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: Authorization=
D [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: No authentication data provided.
d [09/Apr/2010:17:02:59 -0500] cupsdIsAuthorized: con-uri=/cups.css, 
con-best=0x7fe81d3e2120(/)
d [09/Apr/2010:17:02:59 -0500] cupsdIsAuthorized: level=CUPSD_AUTH_ANON, 
type=None, satisfy=CUPSD_AUTH_SATISFY_ALL, num_names=0
d [09/Apr/2010:17:02:59 -0500] cupsdIsAuthorized: auth=CUPSD_AUTH_DENY...
d [09/Apr/2010:17:02:59 -0500] cupsdSendError(con=0x7fe81d40b000(11), code=403, 
auth_type=0
D [09/Apr/2010:17:02:59 -0500] cupsdCloseClient: 11
D [09/Apr/2010:17:02:59 -0500] cupsdSetBusyState: Not busy
d [09/Apr/2010:17:02:59 -0500] cupsdRemoveSelect(fd=11)
d [09/Apr/2010:17:02:59 -0500] cupsdAcceptClient(lis=0x7fe81d3e1d40(7)) 
Clients=0
D [09/Apr/2010:17:02:59 -0500] cupsdAcceptClient: 11 from 160.94.224.1:631 
(IPv4)
d [09/Apr/2010:17:02:59 -0500] cupsdAddSelect(fd=11, read_cb=0x7fe81c477010, 
write_cb=(nil), data=0x7fe81d40b000)
d [09/Apr/2010:17:02:59 -0500] cupsdReadClient(con=0x7fe81d40b000(11)) 
con-http.error=0 con-http.used=0, con-http.state=0 
con-data_encoding=HTTP_ENCODE_LENGTH, con-data_remaining=0, con-file=-1
D [09/Apr/2010:17:02:59 -0500] cupsdReadClient: 11 GET /favicon.ico HTTP/1.1
D [09/Apr/2010:17:02:59 -0500] cupsdSetBusyState: Active clients
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: uri = /favicon.ico...
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location CUPS_INTERNAL_BROWSE_ACL 
Limit 0
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location /admin/conf Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location /admin Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: Location / Limit 7f
d [09/Apr/2010:17:02:59 -0500] cupsdFindBest: best = /
d [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: con-uri=/favicon.ico, 
con-best=0x7fe81d3e2120(/)
d [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: Authorization=
D [09/Apr/2010:17:02:59 -0500] cupsdAuthorize: No 

[Bug 559624] Re: 403 Error when CUPS Listens on *:631

2010-04-09 Thread Aaron J. Zirbes
I am unable to remotely administer the server via

System - Administration - Printing

Server - Connect

Then enter the IP address of the CUPS server (that isn't working)

-- 
403 Error when CUPS Listens on *:631
https://bugs.launchpad.net/bugs/559624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 559624] Re: 403 Error when CUPS Listens on *:631

2010-04-09 Thread Aaron J. Zirbes
Installed new server from scratch:

Insert CD
F4 (Install a minimal virtual machine)
Install Ubuntu Server
English
US
No
USA
USA
Default Hostname
Default Timezone
Guided - use entire disk and set up LVM
Install security update automatically
Software selection : Print Server

After reboot, login

sudo apt-get update
sudo apt-get dist-upgrade
sudo sed -i -e 's/Listen localhost:631/Listen *:631/g' /etc/cups/cupsd.conf
sudo reboot

Open web browser to
https://new server ip address:631/

Broken!


** Summary changed:

- 403 Error when CUPS Listens on *:631
+ CUPS will not function as network Print Server

-- 
CUPS will not function as network Print Server
https://bugs.launchpad.net/bugs/559624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 559624] Re: CUPS will not function as network Print Server

2010-04-09 Thread Aaron J. Zirbes
** Changed in: cups (Ubuntu)
   Status: New = Confirmed

-- 
CUPS will not function as network Print Server
https://bugs.launchpad.net/bugs/559624
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 457899] Re: Impossible to add shared physical device

2010-04-09 Thread Aaron J. Zirbes
I haven't heard anything on this lately.  For all those with this problem my 
temporary fix is to
   sudo apt-et install install virt-manager
on the server, and 
   ssh -Y
into the server, then run 
   sudo virt-manager

to use virt-manager locally on the server.

This is not the desired solution as it requires a larger footprint on
the server, but it will work for now.

** Changed in: virt-manager (Ubuntu)
   Status: New = Confirmed

-- 
Impossible to add shared physical device
https://bugs.launchpad.net/bugs/457899
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 558793] [NEW] net ads dns register fails in 2008 R2 domain

2010-04-08 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: samba

Samba fails to do Dynamic DNS updates for Member server in Windows
Server 2008 R2 Active Directory

Samba 3.4.7
Ubuntu 10.4 Server

Linux enhs-nunstudy 2.6.32-19-server #28-Ubuntu SMP Thu Apr 1 11:46:36 UTC 2010 
x86_64 GNU/Linux
samba 2:3.4.7~dfsg-1ubuntu2

sudo net ads testjoin -P
Join is OK

sudo net ads status -P
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
objectClass: computer
cn: enhs-nunstudy
distinguishedName: 
CN=enhs-nunstudy,OU=Servers,OU=Computers,OU=ENHS,OU=SPH,OU=Medical,OU=TC,OU=Units,DC=ad,DC=umn,DC=edu
instanceType: 4
whenCreated: 20100408191652.0Z
whenChanged: 20100408222355.0Z
uSNCreated: 22096306
uSNChanged: 22164820
name: enhs-nunstudy
objectGUID: 34f5a339-c6ec-4661-X
userAccountControl: 69632
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 129152302177892432
lastLogon: 129152396733757235
localPolicyFlags: 0
pwdLastSet: 129152302174449063
primaryGroupID: 515
objectSid: S-1-5-21-1317685450-
accountExpires: 9223372036854775807
logonCount: 24
sAMAccountName: ENHS-NUNSTUDY$
location: 160.94.224.93
sAMAccountType: 805306369
dNSHostName: enhs-nunstudy.ad.umn.edu
servicePrincipalName: HOST/enhs-nunstudy.ad.umn.edu
servicePrincipalName: HOST/ENHS-NUNSTUDY
objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=ad,DC=umn,DC=edu
isCriticalSystemObject: FALSE
dSCorePropagationData: 1601010100.0Z
lastLogonTimestamp: 129152302176165129

Note: This update fails when passing -U adminAccount%secretpassword

sudo net ads dns register -P
DNS update failed!

I've reproduced this on 3 test servers.

What follows is the debug output for the sudo net ads dns register -P
command

[2010/04/08 17:29:46,  5] lib/debug.c:407(debug_dump_status)
  INFO: Current debug levels:
all: True/99
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking: False/0
msdfs: False/0
dmapi: False/0
registry: False/0
[2010/04/08 17:29:46,  3] param/loadparm.c:9039(lp_load_ex)
  lp_load_ex: refreshing parameters
[2010/04/08 17:29:46,  3] param/loadparm.c:4848(init_globals)
  Initialising global parameters
[2010/04/08 17:29:46,  2] param/loadparm.c:4707(max_open_files)
  rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
[2010/04/08 17:29:46,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file /etc/samba/smb.conf
[2010/04/08 17:29:46,  3] param/loadparm.c:7726(do_section)
  Processing section [global]
  doing parameter server string = EnHS Health Studies Samba Server
  doing parameter netbios name = %h
[2010/04/08 17:29:46,  4] param/loadparm.c:7088(handle_netbios_name)
  handle_netbios_name: set global_myname to: ENHS-NUNSTUDY
  doing parameter workgroup = AD
  doing parameter security = ADS
  doing parameter realm = AD.UMN.EDU
  doing parameter local master = no
  doing parameter client ntlmv2 auth = yes
  doing parameter ntlm auth = no
  doing parameter idmap backend = tdb
  doing parameter idmap uid = 16777216-33554431
  doing parameter idmap gid = 16777216-33554431
  doing parameter idmap config AD:backend = rid
  doing parameter idmap config AD:range = 16777216-33554431
  doing parameter template shell = /bin/bash
  doing parameter template homedir = /home/%D/%U
  doing parameter winbind separator = +
  doing parameter winbind use default domain = yes
  doing parameter winbind offline logon = true
  doing parameter winbind enum users = no
  doing parameter winbind enum groups = no
  doing parameter winbind refresh tickets = true
  doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  doing parameter load printers = no
  doing parameter log file = /var/log/samba/log.%m
  doing parameter max log size = 1000
  doing parameter syslog = 0
  doing parameter panic action = /usr/share/samba/panic-action %d
  doing parameter load printers = no
[2010/04/08 17:29:46,  4] param/loadparm.c:9074(lp_load_ex)
  pm_process() returned Yes
[2010/04/08 17:29:46,  7] param/loadparm.c:9279(lp_servicenumber)
  lp_servicenumber: couldn't find homes
[2010/04/08 17:29:46, 10] param/loadparm.c:8287(set_server_role)
  set_server_role: role = ROLE_DOMAIN_MEMBER
[2010/04/08 17:29:46,  5] lib/iconv.c:104(smb_register_charset)
  Attempting to register new charset UCS-2LE
[2010/04/08 17:29:46,  5] lib/iconv.c:112(smb_register_charset)
  Registered charset UCS-2LE
[2010/04/08 17:29:46,  5] lib/iconv.c:104(smb_register_charset)
  Attempting to register new charset UTF-16LE
[2010/04/08 17:29:46,  5] lib/iconv.c:112(smb_register_charset)
  Registered charset UTF-16LE
[2010/04/08 17:29:46,  5] lib/iconv.c:104(smb_register_charset)
  Attempting to register new charset UCS-2BE
[2010/04/08 17:29:46,  5] 

[Bug 553342] Re: spnego references incorrect realm via winbind when joined to AD and spnego is enabled

2010-04-02 Thread Aaron J. Zirbes
I just setup a lucid beta server, and can confirm that this has been
fixed in lucid.

Original bug name: sid-to-name resolution in w2k8r2 trusting domains
not working

Thanks Thierry!


** Changed in: samba (Ubuntu)
   Status: Incomplete = Fix Released

-- 
spnego references incorrect realm via winbind when joined to AD and spnego is 
enabled
https://bugs.launchpad.net/bugs/553342
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 553342] Re: spnego references incorrect realm via winbind when joined to AD and spnego is enabled

2010-04-02 Thread Aaron J. Zirbes
I just setup a lucid beta server, and can confirm that this has been
fixed in lucid.

Original bug name: sid-to-name resolution in w2k8r2 trusting domains
not working

Thanks Thierry!


** Changed in: samba (Ubuntu)
   Status: Incomplete = Fix Released

-- 
spnego references incorrect realm via winbind when joined to AD and spnego is 
enabled
https://bugs.launchpad.net/bugs/553342
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 553342] [NEW] spnego references incorrect realm via winbind when joined to AD and spnego is enabled

2010-04-01 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: samba

After successfully joined to Windows 2008 AD domain, spnego via winbind passes 
incorrect principal to 
libsmb/clikrb5.c:852: ads_krb5_mk_req()

This happens immediately on startup.

The principal should be based the REALM, not the WORKGROUP.

I think the fix involves cli_session_setup_spnego() guessing a little
better at the realm name that it gets back from the
spnego_parse_negTokenInit() function, by checking if the principal
returned is @DOMAIN, and then replacing the principal as @REALM?

Thoughts?

Principal Passed: d...@ad
Expected Principal: d...@ad.umn.edu

smb.conf:
[global]

   # Name
   netbios name = enhs-samba-test

   # AD Membership pointers
   workgroup = AD
   security = ADS
   realm = AD.UMN.EDU
   preferred master = no

   # Security options
   encrypt passwords = true
   guest account = nobody
   client plaintext auth = no
   client lanman auth = no
   client ntlmv2 auth = yes
   client signing = yes
   client schannel = yes
   client use spnego = yes
   ntlm auth = no
   lanman auth = no

   # Active Directory user mapping options
   idmap uid = 100-199
   idmap gid = 100-199

   winbind use default domain = yes
   winbind offline logon = true
   winbind enum users = yes
   winbind enum groups = yes
   winbind nested groups = yes
   winbind refresh tickets = yes

log.winbindd log when running at log level = 1 :

[2010/04/01 08:50:11,  1] libsmb/clikrb5.c:697(ads_krb5_mk_req)
  ads_krb5_mk_req: krb5_get_credentials failed for dcst...@ad (Cannot resolve 
network address for KDC in requested realm)
[2010/04/01 08:50:11,  1] libsmb/cliconnect.c:745(cli_session_setup_kerberos)
  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve 
network address for KDC in requested realm

log.winbindd log when running at log level = 99 :

[2010/04/01 09:10:35, 10] libads/kerberos.c:187(kerberos_kinit_password_ext)
  kerberos_kinit_password: as enhs-samba-te...@ad.umn.edu using 
[MEMORY:cliconnect] as ccache and config [(null)]
[2010/04/01 09:10:35,  3] libsmb/cliconnect.c:1018(cli_session_setup_spnego)
  cli_session_setup_spnego: got a bad server principal, trying to guess ...
[2010/04/01 09:10:35,  3] libsmb/cliconnect.c:1047(cli_session_setup_spnego)
  cli_session_setup_spnego: guessed server principal=dcw...@ad
[2010/04/01 09:10:35,  2] libsmb/cliconnect.c:738(cli_session_setup_kerberos)
  Doing kerberos session setup
[2010/04/01 09:10:35,  1] libsmb/clikrb5.c:697(ads_krb5_mk_req)
  ads_krb5_mk_req: krb5_get_credentials failed for dcw...@ad (Cannot resolve 
network address for KDC in requested realm)
[2010/04/01 09:10:35,  1] libsmb/cliconnect.c:745(cli_session_setup_kerberos)
  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve 
network address for KDC in requested realm


... for now I'll just turn spenego off, but this could be fixed.

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New

-- 
spnego references incorrect realm via winbind when joined to AD and spnego is 
enabled
https://bugs.launchpad.net/bugs/553342
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 553342] Re: spnego references incorrect realm via winbind when joined to AD and spnego is enabled

2010-04-01 Thread Aaron J. Zirbes
Winbind/samba version:

winbind 2:3.4.0-3ubuntu5.6

-- 
spnego references incorrect realm via winbind when joined to AD and spnego is 
enabled
https://bugs.launchpad.net/bugs/553342
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 553342] [NEW] spnego references incorrect realm via winbind when joined to AD and spnego is enabled

2010-04-01 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: samba

After successfully joined to Windows 2008 AD domain, spnego via winbind passes 
incorrect principal to 
libsmb/clikrb5.c:852: ads_krb5_mk_req()

This happens immediately on startup.

The principal should be based the REALM, not the WORKGROUP.

I think the fix involves cli_session_setup_spnego() guessing a little
better at the realm name that it gets back from the
spnego_parse_negTokenInit() function, by checking if the principal
returned is @DOMAIN, and then replacing the principal as @REALM?

Thoughts?

Principal Passed: d...@ad
Expected Principal: d...@ad.umn.edu

smb.conf:
[global]

   # Name
   netbios name = enhs-samba-test

   # AD Membership pointers
   workgroup = AD
   security = ADS
   realm = AD.UMN.EDU
   preferred master = no

   # Security options
   encrypt passwords = true
   guest account = nobody
   client plaintext auth = no
   client lanman auth = no
   client ntlmv2 auth = yes
   client signing = yes
   client schannel = yes
   client use spnego = yes
   ntlm auth = no
   lanman auth = no

   # Active Directory user mapping options
   idmap uid = 100-199
   idmap gid = 100-199

   winbind use default domain = yes
   winbind offline logon = true
   winbind enum users = yes
   winbind enum groups = yes
   winbind nested groups = yes
   winbind refresh tickets = yes

log.winbindd log when running at log level = 1 :

[2010/04/01 08:50:11,  1] libsmb/clikrb5.c:697(ads_krb5_mk_req)
  ads_krb5_mk_req: krb5_get_credentials failed for dcst...@ad (Cannot resolve 
network address for KDC in requested realm)
[2010/04/01 08:50:11,  1] libsmb/cliconnect.c:745(cli_session_setup_kerberos)
  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve 
network address for KDC in requested realm

log.winbindd log when running at log level = 99 :

[2010/04/01 09:10:35, 10] libads/kerberos.c:187(kerberos_kinit_password_ext)
  kerberos_kinit_password: as enhs-samba-te...@ad.umn.edu using 
[MEMORY:cliconnect] as ccache and config [(null)]
[2010/04/01 09:10:35,  3] libsmb/cliconnect.c:1018(cli_session_setup_spnego)
  cli_session_setup_spnego: got a bad server principal, trying to guess ...
[2010/04/01 09:10:35,  3] libsmb/cliconnect.c:1047(cli_session_setup_spnego)
  cli_session_setup_spnego: guessed server principal=dcw...@ad
[2010/04/01 09:10:35,  2] libsmb/cliconnect.c:738(cli_session_setup_kerberos)
  Doing kerberos session setup
[2010/04/01 09:10:35,  1] libsmb/clikrb5.c:697(ads_krb5_mk_req)
  ads_krb5_mk_req: krb5_get_credentials failed for dcw...@ad (Cannot resolve 
network address for KDC in requested realm)
[2010/04/01 09:10:35,  1] libsmb/cliconnect.c:745(cli_session_setup_kerberos)
  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve 
network address for KDC in requested realm


... for now I'll just turn spenego off, but this could be fixed.

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New

-- 
spnego references incorrect realm via winbind when joined to AD and spnego is 
enabled
https://bugs.launchpad.net/bugs/553342
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 553342] Re: spnego references incorrect realm via winbind when joined to AD and spnego is enabled

2010-04-01 Thread Aaron J. Zirbes
Winbind/samba version:

winbind 2:3.4.0-3ubuntu5.6

-- 
spnego references incorrect realm via winbind when joined to AD and spnego is 
enabled
https://bugs.launchpad.net/bugs/553342
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 457899] Re: Impossible to add shared physical device

2010-03-23 Thread Aaron J. Zirbes

virtManager/connection.py only looks at local devices through the dbus 
interface to list bridge connections

This does not work for remote management of Virtual Machine hosts on
remote servers (confirmed via SSH)

In addition the default server install doesn't install the dbus daemon.

I would say that this but is severely impacting the ability to easily
move Ubuntu Server into the Enterprise Datacenter as a simple
Virtualization solution.

I would say this should be fixed, especially because Canonical is
pushing Ubuntu Server as a stable Virtualization platform.

I don't know much about python, or I'd fix it myself.  Any Python
hackers watching this?

-- 
Impossible to add shared physical device
https://bugs.launchpad.net/bugs/457899
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 541520] [NEW] Using incorrect JVM Garbage Collector

2010-03-18 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: tomcat6

The default garbage collector for tomcat should be the Concurrent Mark-
Sweep (CMS) Collector as it is the recommended GC for Web Application
Severs.

The default garbage collector doesn't guarantee quick response times,
and often times causes hangs during garbage collection.

As Tomcat 6 is a web application server, it should use the CMS GC.

Here is the diff to fix it:

diff /etc/default/tomcat6 /etc/default/tomcat6.original
17a18,20
 # Use a concurrent garbage collector for improved response time
 JAVA_OPTS=$JAVA_OPTS -XX:+UseConcMarkSweepGC
 


To do this, the following option can be added to `/etc/default/tomcat6`

...

# Arguments to pass to the Java virtual machine (JVM).
#JAVA_OPTS=-Djava.awt.headless=true -Xmx128M

# Use a concurrent garbage collector for improved response time
JAVA_OPTS=$JAVA_OPTS -XX:+UseConcMarkSweepGC

...


Reference:
http://java.sun.com/javase/technologies/hotspot/gc/memorymanagement_whitepaper.pdf

Additional Material:
http://java.sun.com/javase/technologies/hotspot/gc/index.jsp

Thanks for making Ubuntu Server enterprise ready!

** Affects: tomcat6 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
Using incorrect JVM Garbage Collector
https://bugs.launchpad.net/bugs/541520
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to tomcat6 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 541520] Re: Using incorrect JVM Garbage Collector

2010-03-18 Thread Aaron J. Zirbes

** Patch added: Improved tomcat6 file
   http://launchpadlibrarian.net/41253077/tomcat6

-- 
Using incorrect JVM Garbage Collector
https://bugs.launchpad.net/bugs/541520
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to tomcat6 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 541520] [NEW] Using incorrect JVM Garbage Collector

2010-03-18 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: tomcat6

The default garbage collector for tomcat should be the Concurrent Mark-
Sweep (CMS) Collector as it is the recommended GC for Web Application
Severs.

The default garbage collector doesn't guarantee quick response times,
and often times causes hangs during garbage collection.

As Tomcat 6 is a web application server, it should use the CMS GC.

Here is the diff to fix it:

diff /etc/default/tomcat6 /etc/default/tomcat6.original
17a18,20
 # Use a concurrent garbage collector for improved response time
 JAVA_OPTS=$JAVA_OPTS -XX:+UseConcMarkSweepGC
 


To do this, the following option can be added to `/etc/default/tomcat6`

...

# Arguments to pass to the Java virtual machine (JVM).
#JAVA_OPTS=-Djava.awt.headless=true -Xmx128M

# Use a concurrent garbage collector for improved response time
JAVA_OPTS=$JAVA_OPTS -XX:+UseConcMarkSweepGC

...


Reference:
http://java.sun.com/javase/technologies/hotspot/gc/memorymanagement_whitepaper.pdf

Additional Material:
http://java.sun.com/javase/technologies/hotspot/gc/index.jsp

Thanks for making Ubuntu Server enterprise ready!

** Affects: tomcat6 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
Using incorrect JVM Garbage Collector
https://bugs.launchpad.net/bugs/541520
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 541520] Re: Using incorrect JVM Garbage Collector

2010-03-18 Thread Aaron J. Zirbes

** Patch added: Improved tomcat6 file
   http://launchpadlibrarian.net/41253077/tomcat6

-- 
Using incorrect JVM Garbage Collector
https://bugs.launchpad.net/bugs/541520
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 397203] Re: ldap.so missing from package

2009-07-16 Thread Aaron J. Zirbes
I guess I've only gotten it running on Redhat, OpenSUSE, and FreeBSD hosts.  It 
may have never 
worked in debian/ubuntu builds.

--
Aaron

Thierry Carrez wrote:
 By Winbind has lost LDAP support you mean it used to work with
 previous Ubuntu versions ? Trying to figure if it's a regression or a
 feature request.


-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 397203] Re: ldap.so missing from package

2009-07-10 Thread Aaron J. Zirbes
My version of samba is 2:3.3.2-1ubuntu3 on Ubuntu Server 9.04

I did an SVN checkout of the debian samba package, and the problem is
there as well.

I'm not sure where to post my fix to get this pushed upstream to the
debian package, but the diffs above fix it.

Should I report this bug via debian?   I could install a debian system,
and run reportbug if needed.

** Changed in: samba (Ubuntu)
   Status: In Progress = Confirmed

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 397203] Re: ldap.so missing from package

2009-07-10 Thread Aaron J. Zirbes
My version of samba is 2:3.3.2-1ubuntu3 on Ubuntu Server 9.04

I did an SVN checkout of the debian samba package, and the problem is
there as well.

I'm not sure where to post my fix to get this pushed upstream to the
debian package, but the diffs above fix it.

Should I report this bug via debian?   I could install a debian system,
and run reportbug if needed.

** Changed in: samba (Ubuntu)
   Status: In Progress = Confirmed

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 397203] Re: ldap.so missing from package

2009-07-09 Thread Aaron J. Zirbes
** Changed in: samba (Ubuntu)
   Status: Incomplete = In Progress

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 397203] Re: ldap.so missing from package

2009-07-09 Thread Aaron J. Zirbes
I was unable to do and svn commit to the samba package on alioth yet,
but here's the fix:

svn diff debian/rules
Index: rules
===
--- rules   (revision 2940)
+++ rules   (working copy)
@@ -48,7 +48,7 @@
--with-pam_smbpass \
--with-libsmbclient \
--with-winbind \
-   
--with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_tdb2 \
+   
--with-shared-modules=idmap_ldap,idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_tdb2
 \
--with-automount \
--with-ldap \
--with-ads \

svn diff debian/winbind.files 
Index: winbind.files
===
--- winbind.files   (revision 2940)
+++ winbind.files   (working copy)
@@ -6,6 +6,7 @@
 usr/lib/samba/idmap/adex.so
 usr/lib/samba/idmap/hash.so
 usr/lib/samba/idmap/tdb2.so
+usr/lib/samba/idmap/ldap.so
 usr/share/man/man1/wbinfo.1
 usr/share/man/man1/ntlm_auth.1
 usr/share/man/man8/pam_winbind.8

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 397203] Re: ldap.so missing from package

2009-07-09 Thread Aaron J. Zirbes
** Changed in: samba (Ubuntu)
   Status: Incomplete = In Progress

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 397203] [NEW] ldap.so missing from package

2009-07-08 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: winbind

Winbind has lost LDAP support because ldap.so is missing from
/usr/lib/samba/idmap/ldap.so

I discovered this when trying to use winbind to map to LDAP:
/var/log/samba/log.winbind-idmap reported the following:

[2009/07/08 17:10:26,  5] lib/module.c:smb_probe_module(111)
  Probing module 'ldap'
[2009/07/08 17:10:26,  5] lib/module.c:smb_probe_module(130)
  Probing module 'ldap': Trying to load from /usr/lib/samba/idmap/ldap.so
[2009/07/08 17:10:26,  3] lib/module.c:do_smb_load_module(48)
  Error loading module '/usr/lib/samba/idmap/ldap.so': 
/usr/lib/samba/idmap/ldap.so: cannot open shared object file: No such file or 
directory
[2009/07/08 17:10:26,  1] winbindd/idmap.c:idmap_alloc_init(578)
  could not find idmap alloc module 
ldap:ldap://ldap-north.healthstudies.umn.edu/

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: idmap ldap winbind

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 397203] [NEW] ldap.so missing from package

2009-07-08 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: winbind

Winbind has lost LDAP support because ldap.so is missing from
/usr/lib/samba/idmap/ldap.so

I discovered this when trying to use winbind to map to LDAP:
/var/log/samba/log.winbind-idmap reported the following:

[2009/07/08 17:10:26,  5] lib/module.c:smb_probe_module(111)
  Probing module 'ldap'
[2009/07/08 17:10:26,  5] lib/module.c:smb_probe_module(130)
  Probing module 'ldap': Trying to load from /usr/lib/samba/idmap/ldap.so
[2009/07/08 17:10:26,  3] lib/module.c:do_smb_load_module(48)
  Error loading module '/usr/lib/samba/idmap/ldap.so': 
/usr/lib/samba/idmap/ldap.so: cannot open shared object file: No such file or 
directory
[2009/07/08 17:10:26,  1] winbindd/idmap.c:idmap_alloc_init(578)
  could not find idmap alloc module 
ldap:ldap://ldap-north.healthstudies.umn.edu/

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: idmap ldap winbind

-- 
ldap.so missing from package
https://bugs.launchpad.net/bugs/397203
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 381918] Re: 9.04 server documentation, Samba as a Domain Controller, says security = domain by mistake

2009-07-06 Thread Aaron J. Zirbes
Agreed.  This line should say security = user

** Changed in: ubuntu-docs (Ubuntu)
   Status: New = Confirmed

-- 
9.04 server documentation, Samba as a Domain Controller, says security = 
domain by mistake
https://bugs.launchpad.net/bugs/381918
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2009-03-12 Thread Aaron J. Zirbes

** Attachment added: Dependencies.txt
   http://launchpadlibrarian.net/23812419/Dependencies.txt

** Attachment added: DpkgTerminalLog.txt
   http://launchpadlibrarian.net/23812420/DpkgTerminalLog.txt

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 342056] [NEW] Samba automatic account creation assumes local accounts

2009-03-12 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: samba

Samba's mksmbpasswd, called from samba postinst, should not create
accounts if the passwd or shadow line of /etc/nsswitch.conf contains
ldap (or in that case, anything other than compat or files)

It tried creating hundreds of user accounts that were from LDAP.

If nsswitch.conf is using LDAP, there is a VERY HIGH CHANCE that Samba
will be using LDAP as well, and therefore smbpasswd is unnecessary.

ProblemType: Package
Architecture: amd64
DistroRelease: Ubuntu 8.10
ErrorMessage: subprocess post-installation script killed by signal (Interrupt)
NonfreeKernelModules: fglrx
Package: samba 2:3.2.3-1ubuntu3.4
SourcePackage: samba
Title: package samba 2:3.2.3-1ubuntu3.4 failed to install/upgrade: subprocess 
post-installation script killed by signal (Interrupt)
Uname: Linux 2.6.27-11-generic x86_64

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: apport-package

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2009-03-12 Thread Aaron J. Zirbes
I've created a diff file patch for the following files.  Please review
and test.

debian/samba.postinst
packaging/Debian/debian-unstable/samba.postinst
packaging/Debian/debian-sarge/samba.postinst
packaging/Debian/debian-woody/samba.postinst


** Attachment added: Patch for debian/samba.postinst
   http://launchpadlibrarian.net/23812831/samba.postinst.diff

** Changed in: samba (Ubuntu)
 Assignee: (unassigned) = Aaron J. Zirbes (ajz)
   Status: New = Confirmed

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2009-03-12 Thread Aaron J. Zirbes

** Attachment added: Dependencies.txt
   http://launchpadlibrarian.net/23812419/Dependencies.txt

** Attachment added: DpkgTerminalLog.txt
   http://launchpadlibrarian.net/23812420/DpkgTerminalLog.txt

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 342056] [NEW] Samba automatic account creation assumes local accounts

2009-03-12 Thread Aaron J. Zirbes
Public bug reported:

Binary package hint: samba

Samba's mksmbpasswd, called from samba postinst, should not create
accounts if the passwd or shadow line of /etc/nsswitch.conf contains
ldap (or in that case, anything other than compat or files)

It tried creating hundreds of user accounts that were from LDAP.

If nsswitch.conf is using LDAP, there is a VERY HIGH CHANCE that Samba
will be using LDAP as well, and therefore smbpasswd is unnecessary.

ProblemType: Package
Architecture: amd64
DistroRelease: Ubuntu 8.10
ErrorMessage: subprocess post-installation script killed by signal (Interrupt)
NonfreeKernelModules: fglrx
Package: samba 2:3.2.3-1ubuntu3.4
SourcePackage: samba
Title: package samba 2:3.2.3-1ubuntu3.4 failed to install/upgrade: subprocess 
post-installation script killed by signal (Interrupt)
Uname: Linux 2.6.27-11-generic x86_64

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: apport-package

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 342056] Re: Samba automatic account creation assumes local accounts

2009-03-12 Thread Aaron J. Zirbes
I've created a diff file patch for the following files.  Please review
and test.

debian/samba.postinst
packaging/Debian/debian-unstable/samba.postinst
packaging/Debian/debian-sarge/samba.postinst
packaging/Debian/debian-woody/samba.postinst


** Attachment added: Patch for debian/samba.postinst
   http://launchpadlibrarian.net/23812831/samba.postinst.diff

** Changed in: samba (Ubuntu)
 Assignee: (unassigned) = Aaron J. Zirbes (ajz)
   Status: New = Confirmed

-- 
Samba automatic account creation assumes local accounts
https://bugs.launchpad.net/bugs/342056
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs