03/11/10 0:00:47 ekacnet: still no idea what you are talking about, sorry, cant find any mail mentioning TTT 03/11/10 0:02:05 gd: ah because it wasn't on the list 03/11/10 0:02:12 Signoff: Rickson- (Quit: Ex-Chat) 03/11/10 0:02:19 do you think I can forward it to you ? 03/11/10 0:04:57 Signoff: bradh_ (Remote host closed the connection) 03/11/10 0:05:29 bradh_ (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 0:10:54 gd - you still around ? 03/11/10 0:15:10 wanon: yep 03/11/10 0:50:17 Signoff: lagarcia (Remote host closed the connection) 03/11/10 1:04:30 idra: where did things to to with sahlberg's DNS and CLDAP work? 03/11/10 1:04:44 did you guys ever get the code updated? 03/11/10 1:06:08 no 03/11/10 1:06:21 ronny seem too busy 03/11/10 1:06:39 and the code was quite tied to winbindd and used the old composite stuff 03/11/10 1:06:41 yeah, he is a very busy man - that's why this didn't go anywhere 03/11/10 1:07:03 and I have been busy too, things keep coming my way 03/11/10 1:07:09 yeah... 03/11/10 1:07:12 however atm I may not need it 03/11/10 1:07:12 irda i will look into it next week when i am home again 03/11/10 1:07:23 sahlberg, sure not pushing you 03/11/10 1:07:30 I may have found a way around for now 03/11/10 1:07:42 that's why I haven't worked on it yet 03/11/10 1:08:00 you should be able to use DNS, and use the connect_multi code to get a similar effect 03/11/10 1:08:09 (only making a connection to the first host to respond) 03/11/10 1:08:58 at the time I needed to be sure I was connecting to a PDC 03/11/10 1:09:35 but I decide to lower my requests by solving first the trust problem by creating the trusts on each side and only do validation later 03/11/10 1:09:47 that code path looks much simpler and more promising for a start 03/11/10 1:09:57 requires a lot less calls 03/11/10 1:10:21 yeah 03/11/10 1:10:44 although there is one netlogon call that still look nasty and it also seem to imply windows expect the other server to have a schannel cache for all connections both incoming and outgoing 03/11/10 1:10:57 it seem to request information on a currently outgoing schannel connection 03/11/10 1:11:09 looking to see if that info can simply be faked for now 03/11/10 1:11:34 otherwise we are back to require making an outbound connection + keeping track of it 03/11/10 1:11:35 I'm intrigued - I look forward to seeing the patches 03/11/10 1:12:10 abartlet, I will try to avoid doing anything not strictly required to make windows accept us as a trusted realm 03/11/10 1:12:26 so if I can avoid doing that I will even if it is not perfect 03/11/10 1:12:33 your worried about ending down a rathole? 03/11/10 1:12:38 yep 03/11/10 1:12:46 but ratholes are so fun! 03/11/10 1:12:55 I need some answers before I get down implementing stuff 03/11/10 1:12:55 we can spend days - weeks - months down them! 03/11/10 1:13:15 (like extended DNs. Now that rathole almost cost me my job! :-) 03/11/10 1:13:16 abartlet, this is one that stinks of months 03/11/10 1:13:40 :-) 03/11/10 1:19:34 Signoff: mimir (Ping timeout: 264 seconds) 03/11/10 1:29:01 Signoff: coffeedude (Quit: Leaving) 03/11/10 1:43:04 Signoff: sahlberg (Remote host closed the connection) 03/11/10 2:03:50 Signoff: bradh_ (Remote host closed the connection) 03/11/10 2:04:21 bradh_ (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 2:06:29 _gaffe (~nagloc@pool-71-254-86-214.lyncva.east.verizon.net) has joined channel #samba-technical 03/11/10 2:10:19 Signoff: [machine]_ (Ping timeout: 276 seconds) 03/11/10 2:11:16 [machine] (~timb@kelowna.ca.nth-dimension.org.uk) has joined channel #samba-technical 03/11/10 2:57:25 Signoff: bradh_ (Remote host closed the connection) 03/11/10 2:57:57 bradh_ (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 4:18:57 Signoff: sdann (Write error: Broken pipe) 03/11/10 4:19:13 sdann (~sdanneman@gw-105.extranet.sea01.isilon.com) has joined channel #samba-technical 03/11/10 4:29:06 Signoff: _mavrick61 (Remote host closed the connection) 03/11/10 4:30:10 _mavrick61 (~mavrick61@213.132.111.1) has joined channel #samba-technical 03/11/10 4:34:10 Signoff: kukks (Quit: Going home ...) 03/11/10 4:37:08 lagarcia (~lagarcia@12.157.249.2) has joined channel #samba-technical 03/11/10 4:46:40 bradh_ is now known as bradh 03/11/10 4:58:51 Signoff: bradh (Remote host closed the connection) 03/11/10 4:59:15 bradh (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 5:33:09 jays (~jay@nat/novell/x-ucebjeailrqawlaf) has joined channel #samba-technical 03/11/10 5:51:28 sahlberg (~sahlberg@12-187-218-26.att-inc.com) has joined channel #samba-technical 03/11/10 6:29:32 Signoff: abartlet (Quit: Client exiting) 03/11/10 7:07:53 Signoff: bradh (Remote host closed the connection) 03/11/10 7:08:20 bradh (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 7:31:24 anubhavrocks (~anubhav@114.143.90.41) has joined channel #samba-technical 03/11/10 8:29:00 ab[out] is now known as ab 03/11/10 8:31:21 sendro (~sendro@d114-78-195-241.meb801.vic.optusnet.com.au) has joined channel #samba-technical 03/11/10 8:56:35 sahlberg has left channel #samba-technical 03/11/10 9:07:44 SanBadger (~kvirc@193.175.27.57) has joined channel #samba-technical 03/11/10 9:07:47 hi * 03/11/10 9:13:28 kinkie (~kinkie-ir@eu.squid-cache.org) has joined channel #samba-technical 03/11/10 9:15:00 Signoff: bradh (Read error: Connection reset by peer) 03/11/10 9:15:27 bradh (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 9:29:50 kamenim (~kamenim@mail.sofia.postpath.com) has joined channel #samba-technical 03/11/10 9:40:11 Signoff: sendro (Ping timeout: 245 seconds) 03/11/10 9:52:20 Signoff: kinkie (Quit: $HOME, sweet $HOME) 03/11/10 10:25:24 morning 03/11/10 10:25:57 hi 03/11/10 10:26:58 Signoff: bradh (Read error: Connection reset by peer) 03/11/10 10:49:32 Rickson- (~asd@h-124-2.A213.corp.bahnhof.se) has joined channel #samba-technical 03/11/10 11:16:50 nivanova (~nivanova@mail.sofia.postpath.com) has joined channel #samba-technical 03/11/10 11:23:48 Signoff: jays (Read error: Operation timed out) 03/11/10 11:31:04 mimir (~rafal__@static-87-105-185-84.ssp.dialog.net.pl) has joined channel #samba-technical 03/11/10 12:26:31 kukks (~Guenter@p57A0830A.dip0.t-ipconnect.de) has joined channel #samba-technical 03/11/10 12:58:30 hi all 03/11/10 12:58:47 does anybody manage to solve this error: "Compiling dsdb/samdb/ldb_modules/repl_meta_data.c" 03/11/10 12:58:57 dsdb/samdb/ldb_modules/repl_meta_data.c: In function 'replmd_replPropertyMetaDataCtr1_sort': 03/11/10 12:58:58 dsdb/samdb/ldb_modules/repl_meta_data.c:606: error: implicit declaration of function 'LDB_TYPESAFE_QSORT' 03/11/10 12:59:11 just pull the latest git version 03/11/10 12:59:14 of samba4 03/11/10 12:59:36 and when doing compile I got this error 03/11/10 13:00:13 Using external popt: yes 03/11/10 13:00:13 Using external talloc: yes 03/11/10 13:00:13 Using external tdb: yes 03/11/10 13:00:13 Using external tevent: yes 03/11/10 13:00:13 Using external ldb: yes 03/11/10 13:00:14 Using external heimdal: no 03/11/10 13:00:28 Is it beacuse I'm using the internal heimdal? 03/11/10 13:00:33 I'm runing debian 03/11/10 13:01:16 sassyn: last time I asked it's still impossible not to use the internal heimdal, do that should be ok 03/11/10 13:01:59 ewoud, So u sayin that I shoudl use external heimdal in the configure command? 03/11/10 13:02:31 sassyn: no, I'm saying that there are still unmerged patches in the internal heimdal which are not yet available in the external heimdal 03/11/10 13:03:05 Ok, so I should i solve the compilation? 03/11/10 13:03:23 I think your problem might be the external ldb 03/11/10 13:03:49 there is no real ldb package available, though jelmer has made one on debian 03/11/10 13:03:54 but that might be outdated 03/11/10 13:04:34 jelmer, did ship ldb, popt, talloc, tdb and tevent in debain 03/11/10 13:04:45 sassyn: run git clean -f -x 03/11/10 13:04:47 and try again 03/11/10 13:04:51 I have rebuild these pkg for debain lenny 03/11/10 13:05:30 the problem howerver that there is still some issue with compaling heimdal-1.4.0 03/11/10 13:05:32 the whole reason there is no ldb release yet, is that it's still a fast moving target so my first guess is that your ldb is older than samba 4 wants it 03/11/10 13:05:43 OK 03/11/10 13:05:53 so basicly u say that don't use any external tools 03/11/10 13:05:59 use samba4 own tools 03/11/10 13:06:04 no, the other ones should be fine 03/11/10 13:07:38 ok, let's give it a try. since jelmer did put in the control file in debian to use the external libarary. I just wanted to build the deb file to be compatiable to the upcoming version of debain 03/11/10 13:07:47 and not only have it in the experminatl 03/11/10 13:08:08 i have use samba4 since alpha4 and alpha10 seems so cool and stable 03/11/10 13:08:20 that I think it is ready for a production allready! 03/11/10 13:12:35 still working ..... make seems good now 03/11/10 13:16:56 what is a vampired DC? 03/11/10 13:17:42 ewoud, gladiac - still compling :-) 03/11/10 13:21:00 segfault_ (~segfault@fsckyou.org) has joined channel #samba-technical 03/11/10 13:21:02 hi 03/11/10 13:21:18 segfault_, hi 03/11/10 13:21:19 anyone with good knowledge about ldapsam/account rights? 03/11/10 13:21:33 segfault_, what do u mean? 03/11/10 13:21:58 i mean the way they are implemented 03/11/10 13:22:09 sassyn: vampire means sucking up another domain if I read http://www.samba.org/samba/docs/man/Samba-Guide/ntmigration.html#ch8-migration correctly 03/11/10 13:22:17 i'd like to know if a problem i'm having is a feature or a bug. 03/11/10 13:22:20 ewoud, gladiac - compiled fine - seem to run 03/11/10 13:24:20 idra, tridge, jmcd, metze? 03/11/10 13:25:30 vl? 03/11/10 13:26:17 Signoff: anubhavrocks (Quit: Leaving) 03/11/10 13:26:22 segfault_: pong 03/11/10 13:26:55 thanks, 03/11/10 13:27:44 the problem is: if the user is part of the SeMachineAccountPrivilege right, he is able to change user accounts and groups also 03/11/10 13:27:54 ekacnet: ping 03/11/10 13:28:27 segfault_: Sorry to defer you, but can you file a bug at bugzilla.samba.org? This should not be the case. 03/11/10 13:28:28 is that a feature (like coming from NT specs), or a bug in my current version? 03/11/10 13:28:54 sure, id just like to have an initial idea 03/11/10 13:29:17 This would be a problem in rpc_server/srv_samr_nt.c 03/11/10 13:38:01 Bug 7238 Submitted 03/11/10 13:38:03 segfault_: Bug https://bugzilla.samba.org/show_bug.cgi?id=7238 maj, P3, ---, samba-bugs@samba.org, NEW, Users with SeMachineAccountPrivilege right are able to change users and groups accounts 03/11/10 13:38:04 thanks. 03/11/10 13:38:50 Signoff: Rickson- (Quit: Lämnar) 03/11/10 14:07:58 hi metze, 03/11/10 14:16:09 What is the status of samba4? with printing? 03/11/10 14:16:25 I still us samba3 for printing, with winbind. 03/11/10 14:16:34 but winbind with samba4 seems to make trouble 03/11/10 14:16:44 1. I saw emails about getent groups 03/11/10 14:17:03 2. it takes a lot of time to resolve getent password from samba4 AD 03/11/10 14:17:23 Same configuration on windows 2003/2008R2 have no problems. 03/11/10 14:17:56 I use rfc2307 03/11/10 14:17:59 any idea? 03/11/10 14:21:09 samba4 doesn't do printing 03/11/10 14:21:38 we're currently improving the s3 print server 03/11/10 14:21:58 and that will be the print server for the future 03/11/10 14:25:23 metze: pong 03/11/10 14:29:51 ekacnet: have you tested with a system libiniparser? 03/11/10 14:30:03 metze, I see 03/11/10 14:30:15 but what about the winbind with samba4? 03/11/10 14:30:17 metze: no sorry 03/11/10 14:30:59 sassyn: depends from what you expect :-) 03/11/10 14:31:12 ekacnet, well - it goes like this 03/11/10 14:31:21 samba4 as AD works great - 100 user 03/11/10 14:31:25 seems just fine! 03/11/10 14:31:41 but one of the server runing samba3 as a print and file server 03/11/10 14:31:44 using cups 03/11/10 14:32:01 the user in the active direcoty has rfc2307 attributes configure 03/11/10 14:32:18 since all of them are loging to a redhat machine 03/11/10 14:32:23 sassyn: there are patches to make pam_winbind works and to improve also nsswtich stuff (so that id ad_user gives more information) 03/11/10 14:32:24 using kerberos and nss_ldap 03/11/10 14:32:36 now, in the samba3 server 03/11/10 14:33:11 when doing getent passwd, it takes a lot of time to bind to the AD. while with the same configuartion this works very fast on windows. so i guess there is some issue 03/11/10 14:33:28 sassyn: then it's a bug 03/11/10 14:33:55 I would be happy to figure out what is worng, but I need some guidelines here 03/11/10 14:34:01 metze, bug in samba3? 03/11/10 14:34:04 or 4? 03/11/10 14:34:09 sassyn: maybe both 03/11/10 14:34:21 sassyn: first do a capture the network traffic 03/11/10 14:34:29 of the working setup 03/11/10 14:34:36 and the non-working setup 03/11/10 14:34:38 I saw u and abalert have wrote this week some email and patches 03/11/10 14:34:46 and then compare them 03/11/10 14:35:30 it seems something with the kerberos entriy. the samba3 server - can't something find himself as part of the domain due to security issues. which after restarting winbind and samba - it can. 03/11/10 14:35:48 capture like in tcpdump? 03/11/10 14:35:52 yep 03/11/10 14:35:57 tcpdump -s0 03/11/10 14:36:06 OK 03/11/10 14:36:13 I will give it a try 03/11/10 14:36:20 I just compling the new version of samba4 03/11/10 14:36:22 so I will see 03/11/10 14:36:32 and also level 10 logs from s3 in both cases 03/11/10 14:36:41 and s4 in case its the ad dc 03/11/10 14:36:51 with the new version; maybe I could drop the bug before alpha12 03/11/10 14:36:53 OK 03/11/10 14:37:06 sassyn: also make sure you use master for s3 and s4 03/11/10 14:37:37 u mean master under the git? 03/11/10 14:38:31 I'm not sure it is a samba3 bug - since on samba3 - version 3.4.0-3ubuntu5.4 under ubuntu that seems to work just fine with windows 2003R2/2008R2. 03/11/10 14:38:50 So, I think I shoud be more focus on samba4. 03/11/10 14:40:13 and one more thing - the replication with other samba4 or windows AD - is working amazing! 03/11/10 14:40:35 :-) great job everyone ! 03/11/10 14:47:46 Rickson- (~Rickson-@h-124-2.A213.corp.bahnhof.se) has joined channel #samba-technical 03/11/10 15:00:30 Signoff: Rickson- () 03/11/10 15:00:46 ambi_ (~ambi@nat/ibm/x-gzomvbrhpcedimoj) has joined channel #samba-technical 03/11/10 15:10:21 Rickson- (~Rickson-@h-124-2.A213.corp.bahnhof.se) has joined channel #samba-technical 03/11/10 15:22:32 ekacnet 03/11/10 15:29:23 [1]sassyn (~sassyn@77.124.84.57) has joined channel #samba-technical 03/11/10 15:29:37 Signoff: lagarcia (Remote host closed the connection) 03/11/10 15:31:36 Signoff: sassyn (Ping timeout: 265 seconds) 03/11/10 15:31:37 [1]sassyn is now known as sassyn 03/11/10 16:19:55 Signoff: Rickson- () 03/11/10 16:28:37 jays (~jay@122.167.179.79) has joined channel #samba-technical 03/11/10 16:32:08 sahlberg (~sahlberg@32.97.110.52) has joined channel #samba-technical 03/11/10 16:36:21 lagarcia (~lagarcia@32.97.110.53) has joined channel #samba-technical 03/11/10 16:45:39 lagarcia_ (~lagarcia@32.97.110.53) has joined channel #samba-technical 03/11/10 16:49:25 Signoff: lagarcia (Ping timeout: 265 seconds) 03/11/10 16:52:39 Signoff: mimir (Ping timeout: 240 seconds) 03/11/10 17:04:09 Signoff: gladiac (Quit: Shutting down C3PO.) 03/11/10 17:04:50 Signoff: jays (Ping timeout: 246 seconds) 03/11/10 17:11:31 gladiac (~asn@milliways.cynapses.org) has joined channel #samba-technical 03/11/10 17:27:45 Signoff: lagarcia_ (Remote host closed the connection) 03/11/10 17:47:00 Signoff: SanBadger (Quit: Leaving...) 03/11/10 17:49:38 Signoff: kamenim (Quit: Miranda IM! Smaller, Faster, Easier. http://miranda-im.org) 03/11/10 17:52:17 ab is now known as ab[out] 03/11/10 17:56:28 Signoff: nivanova (Quit: ChatZilla 0.9.85 [Firefox 3.5.8/20100216105410]) 03/11/10 18:16:19 ccrisan (~ccrisan@2001:660:7301:4168:216:d4ff:fe3f:a63) has joined channel #samba-technical 03/11/10 18:21:31 lagarcia (~lagarcia@32.97.110.53) has joined channel #samba-technical 03/11/10 18:40:24 mimir (~rafal__@static-87-105-185-84.ssp.dialog.net.pl) has joined channel #samba-technical 03/11/10 18:56:43 Signoff: lagarcia (Remote host closed the connection) 03/11/10 19:19:19 Blinkz (~Blinkz@h156n2fls32o256.telia.com) has joined channel #samba-technical 03/11/10 19:21:17 idra, ewoud, etc: Thanks for helping out last night, with the pdbedit things. 03/11/10 19:22:06 pdbedit -L -w works nicely as its got the same formatting as the old smbpasswd file format. 03/11/10 19:22:40 I have some questions regarding the functionality though... 03/11/10 19:22:53 pdbedit -L -w 03/11/10 19:22:54 fooaXB:520:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:97EE5397CE438C81581B41D9667F8B75:[U ]:LCT-4B990DF5: 03/11/10 19:22:54 smbguest:501:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U ]:LCT-00000000: 03/11/10 19:23:55 if i remove and add most any user itll fill in the password field (last XXX field). When adding user smbguest it wont be filled in and cannot be changed. 03/11/10 19:24:59 Is that because its listed in the smbusers file ? 03/11/10 19:25:55 Worked all day and night. Converted the gadmin app to use pdbedit :) 03/11/10 19:28:15 A few requests as follows for the pdbedit program: Also add the (-d disable user) (-e enable user) (-n set no password). 03/11/10 19:28:30 That would be awesome. 03/11/10 19:28:44 smbpasswd had those options. 03/11/10 19:33:54 Signoff: ambi_ (Quit: Leaving.) 03/11/10 19:36:13 Or maybe someone knows how to do those things with the current pdbedit ? 03/11/10 19:36:54 Signoff: torsti76 (Quit: Leaving.) 03/11/10 19:40:53 smbpasswd is still used to add/disable/whatever users 03/11/10 19:42:33 Yeah, but im thinking it can be replaced by pdbedit totally. 03/11/10 19:42:48 Seems to be headed that a way. 03/11/10 19:42:56 anubhavrocks (~anubhav@114.143.86.12) has joined channel #samba-technical 03/11/10 19:43:08 I very much doubt that 03/11/10 19:43:14 How come ? 03/11/10 19:44:24 pdbedit is specific to a specific database type. smbpasswd can be made to use whatever backend is selected in smb.conf 03/11/10 19:47:26 kblin: are you aware that smbpasswd -x UserName will also remove your system users (It seems to be a new thing) 03/11/10 19:48:06 I wrote that down as "DANGER DANGER DANGER" in the changelog :) 03/11/10 19:48:49 So pdbedit is clearly a better program to use atm. 03/11/10 19:49:29 Happens on Fedora12. 03/11/10 19:49:45 Can you check it on your box =? 03/11/10 19:49:58 I almost forgot to report that. 03/11/10 19:51:19 that sounds odd 03/11/10 19:51:22 Ill paste a whole bunch of lines... I hope you see why im doing this... 03/11/10 19:51:31 cat /etc/passwd | grep crappy1 03/11/10 19:51:32 crappy1:x:506:505:Crappy1:/dev/null:/dev/null 03/11/10 19:51:32 [root@localhost src]# 03/11/10 19:51:40 [root@localhost src]# smbpasswd -x crappy1 03/11/10 19:51:41 Deleted user crappy1. 03/11/10 19:51:41 [root@localhost src]# 03/11/10 19:51:47 [root@localhost src]# cat /etc/passwd | grep crappy1 03/11/10 19:51:48 [root@localhost src]# 03/11/10 19:51:56 See ? 03/11/10 19:52:06 have you set a delete user script? 03/11/10 19:52:11 yes 03/11/10 19:52:16 Ive had that for years 03/11/10 19:52:18 there we go 03/11/10 19:52:29 then you ask samba to delete the user for you 03/11/10 19:52:30 Its a new behaviour 03/11/10 19:52:35 no 03/11/10 19:52:39 ? 03/11/10 19:52:58 Ive had it since 2000 and it never deleted my system users 03/11/10 19:53:04 until now 03/11/10 19:54:46 ok, I haven't tried on this machine, but my 8.04 ubuntu ships a manpage that claims that smbpasswd connects to samba via RPC 03/11/10 19:55:10 and man smb.conf claims that the delete user script is run when a user is deleted via rpc 03/11/10 19:55:26 kblin: Nope, that box wont delete your system users when only asked to delete samba users 03/11/10 19:55:39 This is local 03/11/10 19:55:58 ok, so it's new behaviour 03/11/10 19:56:00 [1]sassyn (~sassyn@77.124.84.57) has joined channel #samba-technical 03/11/10 19:56:07 but it's what I'd have expected in the first place 03/11/10 19:56:12 I was very suprised to see my system accounts dissapear 03/11/10 19:56:19 LOL!!! 03/11/10 19:56:39 You expect things to change and become unusable for most users then ? 03/11/10 19:57:00 seriously, if I set a delete user script and delete a user, I'd expect that user to be gone 03/11/10 19:57:20 smbpasswd - Manage samba users ---- Woops, your system users where deleted, SORRY!!! :) 03/11/10 19:57:35 Not locally 03/11/10 19:58:02 smbpasswd doesn't 03/11/10 19:58:07 smbd does 03/11/10 19:58:22 because you told it to by setting a "delete user script" 03/11/10 19:58:31 Signoff: sassyn (Ping timeout: 245 seconds) 03/11/10 19:58:31 [1]sassyn is now known as sassyn 03/11/10 19:58:44 NO, you dont have to have smbd started at all, YOUR SYSTEM ACCOUNTS WILL BE GONE !!! :( 03/11/10 19:58:53 hm? 03/11/10 19:59:00 kblin: stop talking please 03/11/10 19:59:06 .! 03/11/10 20:00:13 Signoff: segfault_ (Ping timeout: 276 seconds) 03/11/10 20:00:21 if you just want to be rude, why don't you go do that on #flood? 03/11/10 20:00:28 DANGER DANGER DANGER !!! kblin is in da house! :) 03/11/10 20:02:40 Ill check this on my Ubuntu 9.10 as well. 03/11/10 20:02:45 re iaw 03/11/10 20:05:02 And yes, it deletes the system users there as well as on Fedora12 03/11/10 20:11:35 Attribute the bug curtesy of "Dark Vejdur Monkeys of Doom" :) 03/11/10 20:13:17 I wonder if it will even delete the root user / That would be soo microsofty. 03/11/10 20:16:47 Whats good is that it doesnt remove the system users home directory, however bad it may be... all permission settings etc GONE! 03/11/10 20:16:49 Hehe 03/11/10 20:18:03 I dont dare to test "smbpasswd -x root". That would be hiddeously evil. 03/11/10 20:29:43 diegobestlinux (~diegobest@201.91.215.132) has joined channel #samba-technical 03/11/10 20:34:30 nivanova_ (~nivanova@92.247.230.241) has joined channel #samba-technical 03/11/10 20:58:26 kblin, pdbedit is not specific to any database 03/11/10 21:00:58 yeah, we added this one for consistency reasons (f48e39540c9767e9077e7534a6d410b4ce597c86) 03/11/10 21:04:10 idra: oh, ok 03/11/10 21:04:34 jelmer: ping 03/11/10 21:05:44 Signoff: nivanova_ (Ping timeout: 268 seconds) 03/11/10 21:06:34 kblin: 'lo 03/11/10 21:09:29 Signoff: diegobestlinux (Ping timeout: 246 seconds) 03/11/10 21:11:48 From my point of view i can only see a solution where smbpasswd is somewhat obsoleted. I think it wouldnt be much of an issue for the users, other then learning pdbedit which is a rather fast thing to do. 03/11/10 21:13:40 idra: Also add the (-d disable user) (-e enable user) (-n set no/NULL password). These are what can be expected when moving from smbpasswd to pdbedit. 03/11/10 21:14:24 I use the -n flag to import many users at once from the various systems password/userlist files 03/11/10 21:14:35 Or datbases 03/11/10 21:15:57 Thats nice to do when using null passwords = yes , then have the users set their own passwords at first logon and so on. 03/11/10 21:16:25 lagarcia (~lagarcia@32.97.110.53) has joined channel #samba-technical 03/11/10 21:17:40 Wow, thats scary even... remembering option "null passwords" 10 years after last using it :) 03/11/10 21:19:52 Hmm, maybe we could have an option-trivia-bot on freenode: Question 1: What option allows using NULL or No passwords:... 03/11/10 21:20:00 null passwords !!! :) 03/11/10 21:20:14 You win, you dared to play. 03/11/10 21:20:21 Whodareswins :P 03/11/10 21:20:57 Sorta like writing all those muds 03/11/10 21:21:08 [y/n] games etc :) 03/11/10 21:21:41 * Blinkz quits jappin for a while 03/11/10 21:21:58 Rickson- (~Rickson@c-f257e155.424-1-64736c12.cust.bredbandsbolaget.se) has joined channel #samba-technical 03/11/10 21:22:20 Signoff: anubhavrocks (Quit: Leaving) 03/11/10 21:24:19 nivanova (~nivanova@92.247.230.241) has joined channel #samba-technical 03/11/10 21:33:52 kusznir_ (~kusznir@casas-thin-serv.ailab.wsu.edu) has joined channel #samba-technical 03/11/10 21:40:15 Hi all: I'm having a really hard time getting samba to do something its designed to do. As I'm not finding anyone who is familiar with the problem, I'm looking for some assistance understanding how samba/winbind is working in this case so I can continue troubleshooting my problem. 03/11/10 21:41:18 Specifically, I'm looking for how winbind-authenticated system users (when set with winbind use localdomain=yes, rid uid backend) differ from local users. 03/11/10 21:42:16 SSH connections from AD users is working fine; however, any X sessions die immediately with all sorts of problems connecting to the users' system bus (dbus). 03/11/10 21:44:23 So there's something different about winbind users, but so far no luck. A basic user has a subset of the groups that a winbind user has. 03/11/10 21:47:08 The only other gotcha I see is when I run "groups", there's no handling of spaces in group names. So "domain admins" appears (at least to me via the groups output) as two separate groups. 03/11/10 21:47:25 So in what ways is a winbind-auth'ed user different? 03/11/10 21:48:06 connecting to the users' system bus (dbus). ... how do you do this ? 03/11/10 21:48:51 run gnome-panel...it connects to the dbus for that x session. 03/11/10 21:49:12 (or complains very loudly and likely crashes) 03/11/10 21:50:04 even running gnome-terminal is going to want to talk to dbus (although it won't exit in failure), 03/11/10 21:50:10 pdbedit -a 'My new user' or... in the conf: ...add..user cmd... = add user '%s' <- Fnutts/semi, ehm.. those other fnutts -< '"'... 03/11/10 21:51:01 kusznir_: Updated and rebooted client ? 03/11/10 21:51:03 the session dbus is started by Xsession on login 03/11/10 21:51:07 Yep...many times. 03/11/10 21:51:16 rebooted it about 50 times yesterday :( 03/11/10 21:51:27 Any hints in the logs ? 03/11/10 21:52:19 The only log I found is .xsession-errors, which is where I see the 20+ dbus errors. In all other respects, winbind seems to be working perfectly. 03/11/10 21:52:40 Logging bad stuff is very low at times, nowdays. Many some microsoft code-mo-ron wrote the thing, i dont know but will try to help. 03/11/10 21:53:08 Paste the differing errors 03/11/10 21:54:10 Dune: The known Universe is ruled by Shaddam ... Lol, what a tool! 03/11/10 21:55:50 Rainbow to the stars. 03/11/10 22:00:16 Blinkz: http://pastebin.ca/1834473 03/11/10 22:00:32 that's the whole log. Ignore the Xlib stuff. 03/11/10 22:00:49 Checkin... 03/11/10 22:01:43 xrdb: No such file or directory 03/11/10 22:01:55 This is a remote login ? 03/11/10 22:02:11 Yes, its via NX (same thing happens with a local console X login) 03/11/10 22:02:31 The first thing you do in those setups are to make sure that you really are in the place you want to be. 03/11/10 22:02:38 "ls -l" 03/11/10 22:02:45 uname -a 03/11/10 22:02:47 etc 03/11/10 22:03:22 Maybe your just in the ramdisk and havnt inited to the real system properly. 03/11/10 22:03:29 (initrd) 03/11/10 22:16:21 bradh (~bradh@ppp115-205.static.internode.on.net) has joined channel #samba-technical 03/11/10 22:22:48 kusznir_: NX is a gay version of having something viable. 03/11/10 22:23:39 Not that i dislike gay people.. they are so happy.. at times, just like anyone else (Fuckin govt) 03/11/10 22:24:53 DARK BLUE SKIES ... QUIT DROPPING THAT SHIT ON SWEDEN YOU FUCKING FAGGOTS !!! 03/11/10 22:25:11 I will kill you, O !!! 03/11/10 22:25:28 perhaps this isn't the place for that 03/11/10 22:25:44 Blinkz, please discuss shit elsewhere or I'll have to kick you out 03/11/10 22:25:54 For fucking up lives it surely was! 03/11/10 22:26:19 I have lined up deaths for people. 03/11/10 22:26:30 * Blinkz shuts the hell up as always 03/11/10 22:26:31 Mode change "+b *!*@*.telia.com" on channel #samba-technical by idra 03/11/10 22:26:37 Signoff: Blinkz (Quit: Quit) 03/11/10 22:26:54 idra: thanks 03/11/10 22:27:00 idra: +1 03/11/10 22:27:12 Mode change "-b *!*@*.telia.com" on channel #samba-technical by idra 03/11/10 22:33:29 chaxen (~Chax@ip-98-36-179-93.dialup.ice.net) has joined channel #samba-technical 03/11/10 22:34:55 idra: What did you dooo! 03/11/10 22:36:02 The people new from 2006 must be told not to suck so much. 03/11/10 22:36:42 Luckily i own many ISPS to do this for me. 03/11/10 22:38:59 idra: SIMO SAUCE from 2003 (elections) 03/11/10 22:39:20 Youre Responsible!!! 03/11/10 22:39:30 Mode change "+b *!*Chax@ip-98-36-179-93.dialup.ice.net" on channel #samba-technical by idra 03/11/10 22:39:35 chaxen has been kicked off channel #samba-technical by idra (chaxen) 03/11/10 22:39:54 annoying bastards 03/11/10 22:40:08 same, probably 03/11/10 22:40:12 for sure 03/11/10 22:40:24 and he will probably keep coming through various proxies 03/11/10 22:41:26 should maybe add a channel samba-advocacy ? That worked in the old comp.sys.amiga.* days. 03/11/10 22:46:56 Signoff: sahlberg (Quit: Leaving.) 03/11/10 23:01:16 abartlet (~abartlet@fn.samba.org) has joined channel #samba-technical 03/11/10 23:01:16 Mode change "+o abartlet" on channel #samba-technical by ChanServ 03/11/10 23:05:16 _gaffe_ (~nagloc@pool-71-173-110-247.lyncva.east.verizon.net) has joined channel #samba-technical 03/11/10 23:06:45 Signoff: Rickson- (Quit: Ex-Chat) 03/11/10 23:08:43 Signoff: _gaffe (Ping timeout: 276 seconds) 03/11/10 23:35:54 diegobestlinux (~diegobest@187.51.39.18) has joined channel #samba-technical 03/11/10 23:44:53 Signoff: kusznir_ (Quit: Leaving) 03/11/10 23:51:18 hi guys, is there an util in s4 to convert a guid from const char * to struct GUID ... I think there has to be but I cant find it for some reason... 03/11/10 23:52:20 nivanova: GUID_from_string() ? 03/11/10 23:52:36 nivanova: it's not under source4, which is why you may have missed it 03/11/10 23:52:46 it's hidden away in librpc/ndr/ 03/11/10 23:52:47 aah... 03/11/10 23:53:09 * nivanova slaps herself on the forehead 03/11/10 23:53:13 thanks 03/11/10 23:53:36 no worries :-) 03/11/10 23:53:38 * gd would not have found it without ctags...