help
Daniel Schwager
Daniel.Schwager at dtnet.de
Mon Nov 8 08:40:22 GMT 2004
samba-technical-request at lists.samba.org wrote:
>
> Send samba-technical mailing list submissions to
> samba-technical at lists.samba.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.samba.org/mailman/listinfo/samba-technical
> or, via email, send a message with subject or body 'help' to
> samba-technical-request at lists.samba.org
>
> You can reach the person managing the list at
> samba-technical-owner at lists.samba.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of samba-technical digest..."
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Today's Topics:
>
> 1. Re: Windows port of Samba 4 branch (Steven Edwards)
> 2. Re: Windows port of Samba 4 branch (Alexander Bokovoy)
> 3. PATCH - add a check for pwd.h (Steven Edwards)
> 4. Re: Windows port of Samba 4 branch (Jelmer Vernooij)
> 5. Samba4 Posix NTVFS questions (G?mes G?za)
> 6. Re: Samba4 Posix NTVFS questions (tridge at samba.org)
> 7. Documentation Update (John H Terpstra)
> 8. [Samba] Documentation Update (John H Terpstra)
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: Re: Windows port of Samba 4 branch
> Date: Sat, 6 Nov 2004 07:38:01 -0800 (PST)
> From: Steven Edwards <steven_ed4153 at yahoo.com>
> To: "Stefan (metze) Metzmacher" <metze at samba.org>
> CC: samba-technical at lists.samba.org
>
> Hello,
>
> --- "Stefan (metze) Metzmacher" <metze at samba.org> wrote:
> > - I would like to see the actuall diff output, to see what build
> > configure changes are needed
> > for this.
>
> Right now there is no diff other than what I and Elrond added to
> Samba-Tng when I started looking in to this project. I am starting from
> scratch and trying to figure out the best way to go about the port.
>
> There are a few issues that need to be addressed before I can even
> start to tackle the code.
>
> 1. Perl on MSYS sucks. I am having some issues with the IDL compiler so
> I have been generating the headers and ndr stuff using cygwin. Really
> what would be nice would be if the Samba *.idl files could be compiled
> with MIDL and WIDL as ReactOS will end up using the IDL compiler from
> WINE.
>
> 2. At least in Samba-TNG there was a major issue with structures and
> defines being defined more than once due to the nature of the Samba
> headers. Its going to require a bit of restructure to make it work with
> the Windows headers.
>
> > - I like this idea:-)
>
> Cool.
>
> Thanks
> Steven
>
>
> __________________________________
> Do you Yahoo!?
> Check out the new Yahoo! Front Page.
> www.yahoo.com
>
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: Re: Windows port of Samba 4 branch
> Date: Sat, 6 Nov 2004 18:57:58 +0300
> From: Alexander Bokovoy <ab at samba.org>
> To: samba-technical at lists.samba.org
> References: <418C8206.5040805 at samba.org>
> <20041106153801.3319.qmail at web21122.mail.yahoo.com>
>
> On Sat, Nov 06, 2004 at 07:38:01AM -0800, Steven Edwards wrote:
> > 1. Perl on MSYS sucks. I am having some issues with the IDL compiler so
> > I have been generating the headers and ndr stuff using cygwin. Really
> > what would be nice would be if the Samba *.idl files could be compiled
> > with MIDL and WIDL as ReactOS will end up using the IDL compiler from
> > WINE.
> We have some extensions to IDL syntax which are absent in MIDL and WIDL.
>
> --
> / Alexander Bokovoy
> Samba Team http://www.samba.org/
> ALT Linux Team http://www.altlinux.org/
> Midgard Project Ry http://www.midgard-project.org/
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: PATCH - add a check for pwd.h
> Date: Sat, 6 Nov 2004 08:06:50 -0800 (PST)
> From: Steven Edwards <steven_ed4153 at yahoo.com>
> To: samba-technical at lists.samba.org
>
> We lack quite a few Unix headers on Windows. I am sending this now as
> this is my first time using subversions and I didnt know what the
> process is for submitting diffs. If this is merged I will need to also
> add checks for
>
> netinet/in.h
> arpa/inet.h
> netdb.h
>
> Thanks
> Steven
>
> Changelog:
> Add a check for pwd.h
>
>
> __________________________________
> Do you Yahoo!?
> Check out the new Yahoo! Front Page.
> www.yahoo.com
>
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Name: pwd-check.diff
> pwd-check.diff Type: unspecified type (application/octet-stream)
> Encoding: base64
> Description: pwd-check.diff
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: Re: Windows port of Samba 4 branch
> Date: Sat, 6 Nov 2004 17:30:14 +0100
> From: Jelmer Vernooij <jelmer at samba.org>
> To: Steven Edwards <steven_ed4153 at yahoo.com>
> CC: samba-technical at lists.samba.org
> References: <418C8206.5040805 at samba.org>
> <20041106153801.3319.qmail at web21122.mail.yahoo.com>
>
> Hi Steven,
>
> On Sat, Nov 06, 2004 at 07:38:01AM -0800, Steven Edwards wrote about 'Re: Windows port of Samba 4 branch':
> > --- "Stefan (metze) Metzmacher" <metze at samba.org> wrote:
> > > - I would like to see the actuall diff output, to see what build
> > > configure changes are needed
> > > for this.
>
> > Right now there is no diff other than what I and Elrond added to
> > Samba-Tng when I started looking in to this project. I am starting from
> > scratch and trying to figure out the best way to go about the port.
>
> > There are a few issues that need to be addressed before I can even
> > start to tackle the code.
>
> > 1. Perl on MSYS sucks. I am having some issues with the IDL compiler so
> > I have been generating the headers and ndr stuff using cygwin. Really
> > what would be nice would be if the Samba *.idl files could be compiled
> > with MIDL and WIDL as ReactOS will end up using the IDL compiler from
> > WINE.
> I've been working towards accepting MIDL-like syntax in pidl. At the
> moment pidl and midl use the same syntax, with a few exceptions:
>
> - Everything [out] in MIDL has one pointer more then in pidl.. (pointer
> is not actually used on the wire).
> - Pidl has a few extensions of it's own (value, relative, subcontext,
> nodiscriminant)
> - And of course the MIDL features PIDL doesn't support. At the moment,
> this is mainly the support for type libraries.
>
> However, the output generated by widl is much like that of midl while
> the output generated by pidl is very very much Samba-specific...
>
> In other words: Using the same IDL files might work in the end, using
> the same compiler might prove to be a bit of a problem without large
> changes to WIDL.
>
> Cheers,
>
> Jelmer
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Name: signature.asc
> signature.asc Type: application/pgp-signature
> Description: Digital signature
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: Samba4 Posix NTVFS questions
> Date: Sat, 06 Nov 2004 20:22:59 +0100
> From: Gémes Géza <geza at kzsdabas.sulinet.hu>
> To: samba-technical at samba.org
>
> Dear Samba Team!
>
> As a person who is hoping in having Samba4 available as soon as
> possible, I would like to ask a few questions:
> IMHO there are two ways to have a working Posix NTVFS:
> A) Every file access happening as one user (e.g. samba, or worse root)
> windows acls beeing mapped to extended attributes, containing SIDs.
> Samba4 reading this EAs would decide about the level of access granted
> to client (This method would satisfy what Samba-TNG folks have
> caracterized a CIFS server, which "happen to run on *nix") -less usefull
> IMHO.
> B) Each file access is happening, with the uid corresponding to the
> connected users sid. Preferable, but with lots of problems: SID to uid
> mappings (better a centralized one: winbind idmap entries in LDAP, or
> better Posix attributes in Samba4's LDAP server). Storing the NT ACLs
> which cannot be mapped to Posix ones as EAs(?)-more useful, but more
> problemful too.
> My question is which one is going to be implemented?
>
> Thanks
>
> Geza Gemes
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: Re: Samba4 Posix NTVFS questions
> Date: Sun, 7 Nov 2004 09:12:38 +1100
> From: tridge at samba.org
> To: Gémes Géza <geza at kzsdabas.sulinet.hu>
> CC: samba-technical at samba.org
> References: <418D2493.3030109 at kzsdabas.sulinet.hu>
>
> Gémes,
>
> > My question is which one is going to be implemented?
>
> There will be multiple solutions available. Right now the posix NTVFS
> is still under development, and doesn't do NT ACLs at all. I expect to
> do an initial NT ACL solution soon (next couple of weeks probably).
>
> The initial solution is likely to be storing NT ACLs in xattr blobs,
> probably in the "trusted.*" xattr namespace. These will be interpretd
> in user space by smbd. The blobs themselves will be NDR encoded. Take
> a look at xattr.idl in the current Samba4 source tree for what I have
> done with dos attributes and DOS EAs to see what I mean, the NT ACL
> solution will be very similar.
>
> The next level of solution will be to have a Linux LSM module that
> interprets these xattr blobs in the kernel, and to have calls that
> smbd can make to ask the LSM module to setup a NTTOKEN security
> context.
>
> Finally, we may implement a mapping between posix ACLs and NT ACLs,
> possibly in parallel with the above schemes. The idea is that the if
> the last ACL modification made is to the posix ACL then the posix ACL
> would be considered the master, and the NT ACL would be derived from
> that. If the last ACL modification was to the NT ACL then the reverse
> would be true.
>
> The priority for me right now is to build all the infrastructure so
> that these different schemes can be implemented. The precise details
> of the initial scheme isn't all that important, what is important is
> that it is flexible enough to do an extremely close emulation of NT
> ACLs, and that we develop test suites that confirm the correct
> behaviour. Once one scheme is developed then plugging in a different
> scheme will not be difficult.
>
> Cheers, Tridge
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: Documentation Update
> Date: Sat, 6 Nov 2004 19:22:24 -0700
> From: John H Terpstra <jht at Samba.Org>
> To: samba at samba.org, samba-technical at samba.org
>
> Folks,
>
> In preparation for the release of Samba-3.0.8 I have updated the smb.conf man
> page as well as the Samba-HOWTO-Collection to document the use of the new
> idmap_rid facility.
>
> As part of the documentation update I have attempted to expand our
> documentation regarding the role that winbind plays in Samba configurations.
> This is a first cut at a chapter inserted to become the new chapter 12 in the
> HOWTO. The following chapters are now numbered one higher.
>
> The new HOWTO will be available on the Samba web site within 24 hours.
> I would very much value feedback as well as further contributions. I am sure
> someone among our users can do a better documentation job, or add more useful
> material. Please send me your suggestions and additions asap.
>
> Thanks.
>
> Cheers,
> John T.
> --
> John H Terpstra
> Samba-Team Member
> Phone: +1 (650) 580-8668
>
> Author:
> The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
> Samba-3 by Example, ISBN: 0131472216
> Hardening Linux, ISBN: 0072254971
> Other books in production.
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Subject: [Samba] Documentation Update
> Date: Sat, 6 Nov 2004 19:22:24 -0700
> From: John H Terpstra <jht at Samba.Org>
> To: samba at samba.org, samba-technical at samba.org
>
> Folks,
>
> In preparation for the release of Samba-3.0.8 I have updated the smb.conf man
> page as well as the Samba-HOWTO-Collection to document the use of the new
> idmap_rid facility.
>
> As part of the documentation update I have attempted to expand our
> documentation regarding the role that winbind plays in Samba configurations.
> This is a first cut at a chapter inserted to become the new chapter 12 in the
> HOWTO. The following chapters are now numbered one higher.
>
> The new HOWTO will be available on the Samba web site within 24 hours.
> I would very much value feedback as well as further contributions. I am sure
> someone among our users can do a better documentation job, or add more useful
> material. Please send me your suggestions and additions asap.
>
> Thanks.
>
> Cheers,
> John T.
> --
> John H Terpstra
> Samba-Team Member
> Phone: +1 (650) 580-8668
>
> Author:
> The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
> Samba-3 by Example, ISBN: 0131472216
> Hardening Linux, ISBN: 0072254971
> Other books in production.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
>
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> _______________________________________________
> samba-technical mailing list
> samba-technical at lists.samba.org
> http://lists.samba.org/mailman/listinfo/samba-technical
--
Viele Gruesse
Daniel Schwager
------------------------------------------------------------
DT Netsolution GmbH - Talaeckerstr. 30 - D-70437 Stuttgart
Tel: +49-711-849910-32 Fax: +49-711-849910-932
WEB: http://www.dtnet.de/ email: daniel.schwager at dtnet.de
More information about the samba-technical
mailing list