samba - Feb 2005 - [PATCH] bug in 3.0.11 winbindd when 'disable netbios = yes'

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Heads up....

If anyone has had problems with winbindd not being able
to locate any domain controllers after upgrading to 3.0.11
*and* you have 'disable netbios = yes' in smb.conf, please
test this preliminary patch (winbind_find_dc.patch).  It's
pretty rough currently but needs some more widespread
testing.  You can download it from :

	http://www.samba.org/~jerry/patches/post-3.0.11/

If anyone would care to test it out on other winbindd
installations, that would be great.  But this is just a
patch in progress.  Please don't install it on production
servers (unless you are already in a lot of pain from the
original bug).

Note that if smbd -b | grep WITH_ADS doesn't return
anything, don't install this patch as I haven't put
in the proper ifdef's to compile on systems without
kerberos and ldap packages.

If you do have trouble with winbindd after installing the
patch, please just email me directly with a short description
and the details of your smb.conf.   Thanks.





cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCC+evIR7qMdg1EfYRAohZAJ4/b5MxGC8m71vCIE8IMAihlmxy9wCfb1y3
2vuQj9ipvqBd3q6fAzb+1Q4=oKS1
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
| Heads up....
|
| If anyone has had problems with winbindd not being able
| to locate any domain controllers after upgrading to 3.0.11
| *and* you have 'disable netbios = yes' in smb.conf, please
| test this preliminary patch (winbind_find_dc.patch).  It's
| pretty rough currently but needs some more widespread
| testing.  You can download it from :
|
|     http://www.samba.org/~jerry/patches/post-3.0.11/

Forgot to mention that you need to run

	$ make proto
	$ make

after applying the patch.




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCC+hMIR7qMdg1EfYRAp1IAJ4yoC1H24ITPZCcpv4OWO4XBl4mWgCfYkwE
VmLUhRETTCicgYK1jO0YicI=gH9k
-----END PGP SIGNATURE-----

Sorry for the break in the threading.
Originally this is from :
http://lists.samba.org/archive/samba/2005-February/100230.html

Quoting from Jerry:
> Heads up.... If anyone has had problems with winbindd not being able 
> to locate any domain controllers after upgrading to 3.0.11 *and* you
> have 'disable netbios = yes' in smb.conf, please test this
preliminary
> patch (winbind_find_dc.patch). It's pretty rough currently but needs
> some more widespread testing. You can download it from :
> http://www.samba.org/~jerry/patches/post-3.0.11/ If anyone would care
> to test it out on other winbindd installations, that would be great.
> But this is just a patch in progress. Please don't install it on
> production servers (unless you are already in a lot of pain from the
> original bug). Note that if smbd -b | grep WITH_ADS doesn't return
> anything, don't install this patch as I haven't put in the proper
> ifdef's to compile on systems without kerberos and ldap packages. If
> you do have trouble with winbindd after installing the patch, please
> just email me directly with a short description and the details of
> your smb.conf. Thanks.
I was forced to goto version 3.0.11 of samba. The added abilities were
needed at this location, also with the printing fixes as well.

So, Samba has fixed Bug #1580 (and yes it did fix it, THANKS Jerry!)

And your prelim-patch for clitar.c also passed the mustard quite well...

And NOW you fix the resulting problem I was having as I brought up the
Samba Server.  wbinfo gave me only local account and groups, 1 sequence
number that was stale and basically was non-functional. I am just glad I
happen to browse by the problem that this patch fixes...

And, as of right now... it is in production, mainly because of the
consequence of the features of 3.0.11.

I wish to thank, all of you on the Samba Team, those of you listed on
the contacts page:

    * Jeremy Allison		* Andrew Tridgell
    * John Terpstra		* Chris Hertel
    * John Blair		* Gerald (Jerry) Carter
    * Michael Warfield		* Brian Roberson
    * Jean Francois Micouleau	* Simo Sorce
    * Andrew Bartlett		* Jelmer Vernooij
    * Richard Sharpe		* Stefan Metzmacher
    * Martin Pool		* Herb Lewis
    * Dan Shearer		* David Fenwick
    * Volker Lendecke		* Tim Potter
    * David Bannon		* Steve French
    * Jim McDonough		* Alexander Bokovoy
    * Rafal Szczesniak		* Marc Kaplan
    * Paul Green		* Deryck Hodge
    * Vance Lankhaar		* Guenther Deschner

To each of you, you have made my life simpler by replacing a POS product
that should never have been this popular.

I am going to share my good fortune (not that it'll be much... but hey
some os better than none) soon enough... with quite a few FOSS Projects
that I convert companies and people to.

The place I work, is nearing a point where I'll be able to run
everything on Linux, using Native apps or using bridge apps like
Wine/wine Derivatives.

Once again: THANKS^3!
-- 
greg@gregfolkert.net
REMEMBER ED CURRY! http://www.iwethey.org/ed_curry

Novell's Directory Services is a competitive product to Microsoft's
Active Directory in much the same way that the Saturn V is a competitive
product to those dinky little model rockets that kids light off down at
the playfield. -- Thane Walkup
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20050212/a858e609/attachment.bin

On Thu 10 Feb, at  23:03h, Gerald (Jerry) Carter wrote:
> | Heads up....
> |
> | If anyone has had problems with winbindd not being able
> | to locate any domain controllers after upgrading to 3.0.11
> | *and* you have 'disable netbios = yes' in smb.conf, please
> | test this preliminary patch (winbind_find_dc.patch).  It's
> | pretty rough currently but needs some more widespread
> | testing.  You can download it from :
> |
> |     http://www.samba.org/~jerry/patches/post-3.0.11/
<http://www.samba.org/%7Ejerry/patches/post-3.0.11/>
> Forgot to mention that you need to run
>	$ make proto
>	$ make
> after applying the patch.
I tested winbind_find_dc_v2.patch in my test environment with 3.0.11 
and winbind seems to work as it was 3.0.10 ;) 
Samba is a domain member in a W2k3 AD and my XP clients get their 
shares (and have access to their files) on the Samba server. In fact I don't
see
a difference between 3.0.10 and 3.0.11 patched with the winbind patch.

The DC's in my production environment are behind routers that doesn't
route NETBIOS, so with the original 3.0.11 I would have gained a lot of 
problems ;)
In my test environment I have only one subnet and there I used 
'disable netbios = yes' in smb.conf to simulate my real environment, so
no DC's can be found via NETBIOS.

Where is "make proto" and "make" needed for? I didn't
use it and 3.0.11
compiled well and winbind seem to work well... (both on RHL9 and FC2).

Regards,
Alex.