samba-technical Digest, Vol 89, Issue 20

mariA Montilla srmaria_123 at
Mon May 17 15:47:42 MDT 2010

From: samba-technical-request at
Subject: samba-technical Digest, Vol 89, Issue 20
To: samba-technical at
Date: Mon, 17 May 2010 12:00:04 -0600

Send samba-technical mailing list submissions to
	samba-technical at
To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to
	samba-technical-request at
You can reach the person managing the list at
	samba-technical-owner at
When replying, please edit your Subject line so it is more specific
than "Re: Contents of samba-technical digest..."

--Archivo adjunto de mensaje reenviado--
From: abartlet at
CC: jelmer at; samba-technical at; samba-cvs at
To: mdw at
Date: Mon, 17 May 2010 08:35:32 +1000
Subject: s4:net domainlevel tool - fix up the error handling as Jelmer suggested

On Sun, 2010-05-16 at 19:03 +0200, Matthias Dieter Wallnöfer wrote:
> Jelmer,
> this is needed since we don't have implemented the functional level 
> change trigger yet (which would also adjust the second value after the 
> first change).
> The tool should support both the actual unchecked s4 behaviour and the 
> Windows one - therefore this strange-looking exception handling.
I think what Jelmer is getting at is:  Have you used this tool against
both servers, in the situation that you describe?  It shouldn't be too
hard to install a server in 2000 mixed functional mode to check, right?
Andrew Bartlett
Andrew Bartlett                      
Authentication Developer, Samba Team 
Samba Developer, Cisco Inc.

--Archivo adjunto de mensaje reenviado--
From: Volker.Lendecke at SerNet.DE
CC: samba-technical at
To: matthew at
Date: Mon, 17 May 2010 10:22:52 +0200
Subject: Re: [PATCH] smbcacls added support for a -I flag

On Wed, May 05, 2010 at 10:46:21PM -0700, matthew at wrote:
> > 
> > set_secdesc contains a bug: If cli_set_secdesc fails,
> > set_secdesc will close fnum twice. 
> > 
> > We have a manpage for smbcacls in
> > docs-xml/manpages-3/smbcacls.1.xml. Can you add the entry
> > for -I?
> Take a look at these.
Pushed, thanks. Sorry it took so long, we had our SambaXP
conference and the cleanup was pretty long after that.

--Archivo adjunto de mensaje reenviado--
From: mat at
To: samba-technical at
Date: Mon, 17 May 2010 10:37:50 +0400
Subject: Simple script to display password expiration

Find attached a simple script for displaying user or computer password 
mat at ares:~$ ~/workspace/samba/display_lastSetPWD
CN=Guest,CN=Users,DC=home,DC=matws,DC=net         	=>  13/12/1901 20:45:52 (end 13/12/1901 20:45:52) (00000000)
CN=mat,CN=Users,DC=home,DC=matws,DC=net           	=>  13/12/1901 20:45:52 (end 13/12/1901 20:45:52) (00000000)
CN=Administrator,CN=Users,DC=home,DC=matws,DC=net 	=>  28/02/2010 12:51:08 (end 12/04/2010 11:38:39) (129118350680000000)
CN=krbtgt,CN=Users,DC=home,DC=matws,DC=net        	=>  28/02/2010 12:51:08 (end 12/04/2010 11:38:39) (129118350680000000)
CN=dns,CN=Users,DC=home,DC=matws,DC=net           	=>  28/02/2010 12:51:09 (end 12/04/2010 11:38:40) (129118350690000000)
CN=mat,CN=Users,DC=home,DC=matws,DC=net           	=>  01/03/2010 12:46:57 (end 13/04/2010 11:34:28) (129119212170000000)
mat at ares:~$ ~/workspace/samba/display_lastSetPWD -c
CN=ARESW7,CN=Computers,DC=home,DC=matws,DC=net            	=>  09/04/2010 21:35:35 (end 22/05/2010 20:23:06) (129153225350000000)
CN=HEBE-X64,OU=Domain Controllers,DC=home,DC=matws,DC=net 	=>  01/05/2010 20:34:07 (end 13/06/2010 19:21:38) (129172196470000000)
CN=ARES,OU=Domain Controllers,DC=home,DC=matws,DC=net     	=>  05/05/2010 10:44:02 (end 17/06/2010 09:31:33) (129175298420000000)
CN=ARESXP,CN=Computers,DC=home,DC=matws,DC=net            	=>  05/05/2010 20:24:46 (end 17/06/2010 19:12:17) (129175646860000000)
Matthieu Patou
Samba Team

--Archivo adjunto de mensaje reenviado--
From: anatoliy.atanasov at
CC: samba-technical at
To: abartlet at
Date: Mon, 17 May 2010 13:30:01 +0300
Subject: Re: upgradeprovision error

> > On Fri, 2010-05-14 at 13:10 +0300, Anatoliy Atanasov wrote:
> > > > On Thu, 2010-05-13 at 15:11 +0300, Anatoliy Atanasov wrote:
> > > > Hi Andrew,
> > > > 
> > > > Here are the patches. Please take a look and push if its ok.
> > > 
> > > It looks OK, except that you should really use a real boolean - 
> true 
> > > and
> > > false in the python.  
> > > 
> > > Also, I don't like it just being a default value in setup_samdb() 
> - it
> > > should either be hardcoded lower down, or set up at the 
> provision()
> > > layer like all the other defaults. 
> > I thought that someday when we make the provision to call vampire 
> this will be re-factored.
> > Anyway, you are right that this way is better.
> > I attached them again.
> Almost there!  I would suggest you don't need to modify 
> setup/provision
> at all, and just use the code you have already done to have the 
> default
> value in provision().
> Otherwise, it looks good (assuming it works :-)
Done and done. I tested with make test/net vampire and dcpromo. It takes a while :)

--Archivo adjunto de mensaje reenviado--
From: thiagobandinha at
To: samba-technical at
Date: Mon, 17 May 2010 08:04:44 -0700
Subject: Login Samba-LDAP

Dear friends,
My network has the following configuration:
I have a Samba server integrated into an LDAP server.
the future we will implement a mechanism of single sign-on: is a
property of access control of multiple, related, but independent
software systems. With this property a user logs in once and gains
access to all systems without being prompted to log in again at each of
them (*).
The user logs into their workstation with their username/password,and this username/password used is the same as it use to gain access to other systems that we have in our network.
So, my question is:if the user is logged into your workstation (authentication Samba/LDAP), can I store this login/password used for later use it to log on other systems?
 Thiago Galvão
Graduate student in Computer ScienceBrazil
"In a World without Walls and Fences, who need Windows and Gates? Think different. Think Linux"

--Archivo adjunto de mensaje reenviado--
From: jra at
CC: jra at; samba-technical at
To: sassyn at
Date: Mon, 17 May 2010 10:06:34 -0700
Subject: Re: SMB2, Samba 3 latest git....

On Sat, May 15, 2010 at 08:57:30PM +0300, Sassy Natan wrote:
> Hi Again,
> I plan to run a full test and make some performance checking using bonnie++
> Maybe we will wait until we have a full smb2 support?
> What do u think?
There are some parts missing, but early data would
still be helpful to know where we are performance
wise. If you like, just send the results to me so
I can get an idea of our current performance.
> I didn't save my tests, but it should quite simple doing them again.
> What are the impact of not having a kerberos support in smb2 at the moment?
Only NTLMv2 etc. logins. Won't be hard to plumb in the krb5
support, I'll probably get that done this week whilst I'm
at the plugfest up at Microsoft.
Connect to the next generation of MSN Messenger

More information about the samba-technical mailing list