search for: mccorkell

.../etc/services Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: robin at mccorkell.me.uk When specifying services by their string form (e.g. "domain" to refer to port 53), an internal service mapping is used (services.c in the source) rather than the system services database at /etc/services (well, via nsswitch). This internal service mapping is much smaller than /etc/...

...sure if this is a problem with Samba4 on the server or Samba3 on the client, or a problem with our configuration, but this isn't the expected behaviour of extended ACLs. We use Samba4 version 4.1.5 and Samba3 client version 3.6.3. Both the server and client are running Ubuntu 12.04 LTS. Robin McCorkell Karoshi Client maintainer, The Linux Schools Project http://www.linuxschools.com https://github.com/the-linux-schools-project

...* BUG 11936: s3-smbd: Support systemd 230. o Jérémie Courrèges-Anglas <jca at wxcvbn.org> * BUG 11864: Provide fallback code for non-portable clearenv(3). o Günther Deschner <gd at samba.org> * BUG 11864: s3:client:smbspool_krb5_wrapper: fix the non clearenv build. o Robin McCorkell <robin at mccorkell.me.uk> * BUG 11276: Correctly set cli->raw_status for libsmbclient in SMB2 code. o Stefan Metzmacher <metze at samba.org> * BUG 11910: s3:smbd: Fix anonymous authentication if signing is mandatory. * BUG 11912: libcli/auth: Let msrpc_parse() return tall...

...* BUG 11936: s3-smbd: Support systemd 230. o Jérémie Courrèges-Anglas <jca at wxcvbn.org> * BUG 11864: Provide fallback code for non-portable clearenv(3). o Günther Deschner <gd at samba.org> * BUG 11864: s3:client:smbspool_krb5_wrapper: fix the non clearenv build. o Robin McCorkell <robin at mccorkell.me.uk> * BUG 11276: Correctly set cli->raw_status for libsmbclient in SMB2 code. o Stefan Metzmacher <metze at samba.org> * BUG 11910: s3:smbd: Fix anonymous authentication if signing is mandatory. * BUG 11912: libcli/auth: Let msrpc_parse() return tall...

...e dialogue also when using MIT. o Robin Hack <hack.robin at gmail.com> * BUG 11890: ldb-samba/ldb_matching_rules: Fix CID 1349424 - Uninitialized pointer read. o Volker Lendecke <vl at samba.org> * BUG 11844: dbwrap_ctdb: Fix ENOENT->NT_STATUS_NOT_FOUND. o Robin McCorkell <robin at mccorkell.me.uk> * BUG 11276: Correctly set cli->raw_status for libsmbclient in SMB2 code. o Stefan Metzmacher <metze at samba.org> * BUG 11910: s3:smbd: Fix anonymous authentication if signing is mandatory. * BUG 11912: libcli/auth: Let msrpc_parse() return tall...

...e dialogue also when using MIT. o Robin Hack <hack.robin at gmail.com> * BUG 11890: ldb-samba/ldb_matching_rules: Fix CID 1349424 - Uninitialized pointer read. o Volker Lendecke <vl at samba.org> * BUG 11844: dbwrap_ctdb: Fix ENOENT->NT_STATUS_NOT_FOUND. o Robin McCorkell <robin at mccorkell.me.uk> * BUG 11276: Correctly set cli->raw_status for libsmbclient in SMB2 code. o Stefan Metzmacher <metze at samba.org> * BUG 11910: s3:smbd: Fix anonymous authentication if signing is mandatory. * BUG 11912: libcli/auth: Let msrpc_parse() return tall...

In our current testing environment, we are using nslcd to get user and group information from the Samba4 LDAP server, using the last part of objectSid as uidNumber. The configuration is designed to pull down unixHomeDirectory and loginShell if they exist, but they default to standard values if they do not. nslcd on each machine binds to LDAP using a dedicated user account, nslcd-service, and

Samba3 allowed for the setting of idmaps and passdb backends to configure how users were pulled in. This made integrating with existing LDAP databases, other other forms of authentication easy, since Samba could be configured to present the same UID and GID as directly from the [insert other auth method here] system. All was good. Unfortunately Samba4 seems to have removed much of that

I have discovered a bug in the LDAP implementation in Samba4. Although I cannot describe the problem very well, I can dump the error and the steps to achieve it and hope you understand what I mean: Running Mozilla Thunderbird connected to Samba4 LDAP (using an anonymous bind, if it matters) it is possible to search for entries. Searching for nothing, for example 'Email contains ', results