similar to: Winbind issue after upgrading from 4.7.5 to 4.8.3

Hi This is the global section of smb.conf. [global]         workgroup = DOMAIN         realm = DOMAIN.COM         netbios name = SAMBA         security = ads         clustering = yes         idmap config * : backend = tdb2         idmap config * : range = 30000-50000         passdb backend = tdbsam         ctdbd socket = /usr/samba/var/run/ctdb/ctdbd.socket         winbind separator =

On Mon, 6 Aug 2018 14:38:33 +0200 Miguel Sanders via samba <samba at lists.samba.org> wrote: > Hi guys > > We recently upgraded our Samba clusters from 4.7.5 to 4.8.3 and > noticed a difference in behavior for winbind. > The situation is as follows > Assume we have a local Linux user XYZ (UID 519) as well as a AD user > object XYZ (UID 30001). >     idmap config *

Hi guys I've been browsing the code and at many places I found the following odd sequence: char * string=malloc(somesize); ? bzero(string,strlen(string)); free(string); I really don't see why you would zero a string and free the memory immediately afterwards? Any idea why this is done? Thanks! Met vriendelijke groet Best regards Bien ? vous Miguel SANDERS ArcelorMittal Gent UNIX

Hi guys While debugging a GSSAPI memory allocation problem not related to OpenSSH, I found a memory leak in OpenSSH when storing forwarded GSSAPI credentials resulting in a growing process segment for each connection that uses GSSAPI credentials forwarding. What happens is the following: In the privileged parent, we are calling ssh_gssapi_storecreds() which itself calls

Hi Does OpenSSH have a feature in which a client gets kicked out after X minutes of inactivity (no keystrokes)? I have seen this on other SSH implementations but I don't see it in OpenSSH. Thnx! Met vriendelijke groet Best regards Bien ? vous Miguel SANDERS ArcelorMittal Gent UNIX Systems & Storage IT Supply Western Europe | John Kennedylaan 51 B-9042 Gent T +32 9 347 3538 | F +32 9

Hi guys Apparently, there is small memory leak in the do_ssh2_kex() routine in sshd.c. Line 2195 in sshd.c states: myproposal[PROPOSAL_SERVER_HOST_KEY_ALGS] = list_hostkey_types(); Where list_hostkey_types() returns a pointer allocated by the xstrdup call (line 735). This pointer should be freed in the calling routine do_ssh2_key(). Should I make a patch for this? Also, since my previous patch

Hi I'm currently observing a rather bizarre situation when using password based Kerberos authentication in OpenSSH on AIX. Even though AIX can authenticate a user via Kerberos (using the KRB5A load module), OpenSSH cannot Kerberos authenticate this user. This is caused by the fact that the user has two attributes which OpenSSH doesn't take into account when forming the principal name of

Hi folks Is there any particular reason why these two great features (thanks Simon!) are not part of the OpenSSH mainstream? Met vriendelijke groet Best regards Bien ? vous Miguel SANDERS ArcelorMittal Gent UNIX Systems & Storage IT Supply Western Europe | John Kennedylaan 51 B-9042 Gent T +32 9 347 3538 | F +32 9 347 4901 | M +32478 805 023 E miguel.sanders at arcelormittal.com

Hi Apparently, the server option "PrintLastLog" does not work on AIX. The last login time is always displayed, disregarding the option. When browsing the code, I found out there are several functions in loginrec.c which solely handle the processing of the last login info (login_get_lastlog, getlast_entry). Since AIX does not provide such a function natively, the configure script sets

https://bugzilla.mindrot.org/show_bug.cgi?id=1601 Summary: Memory leak caused by forwarded GSSAPI credential store Product: Portable OpenSSH Version: 5.2p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at

https://bugzilla.mindrot.org/show_bug.cgi?id=1583 Summary: User principal name in AIX Product: Portable OpenSSH Version: 5.2p1 Platform: PPC OS/Version: AIX Status: NEW Severity: normal Priority: P2 Component: Kerberos support AssignedTo: unassigned-bugs at mindrot.org ReportedBy:

https://bugzilla.mindrot.org/show_bug.cgi?id=1595 Summary: Server option PrintLastLog does not work on AIX Product: Portable OpenSSH Version: 5.2p1 Platform: PPC OS/Version: AIX Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at mindrot.org ReportedBy:

https://bugzilla.mindrot.org/show_bug.cgi?id=1582 Summary: memory leak in do_ssh2_kex() routine (sshd.c) Product: Portable OpenSSH Version: 5.2p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at mindrot.org ReportedBy:

Will I really HAVE to use the idmap backends AD or RID? I was planning to use TDB2 with a script which I've already written: [root at fs3 samba]# ./idmap.sh IDTOSID UID 1301 SID:S-1-5-21-1632654815-303659134-1628659390-1950 [root at fs3 samba]# ./idmap.sh IDTOSID GID 198 SID:S-1-5-21-1632654815-303659134-1628659390-3247 [root at fs3 samba]# ./idmap.sh SIDTOID

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The tdb2 backend for idmap is broken in Ubuntu and presumably debian. As reported here https://bugs.launchpad.net/bugs/789097 Careful how you read it, the quoted patch is the source of the bug, NOT the fix. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

Dear all; I?m running smbd 4.9.5-Debian and I?m struggling to get Time Machine support to work. The server is running Debian Buster, and the client is macOS High Sierra. I can mount the share just fine on its own, but as soon as I tell Time Machine to ?Back Up Now?, it says ?Preparing Backup,? ?Looking for Backup Disk,? and then nothing. The little red exclamation mark tells me that "The

In Samba 4.7.5, the man page for smb.conf contains the following text: " This boolean parameter controls whether smbd(8) will support SMB3            multi-channel.            This parameter has been added with version 4.4.            Warning: Note that this feature is considered experimental in Samba            4.4. Use it at your own risk: Even though it may seem to work well

Hello, is there a way to cluster samba4 with ctdb? The old [global] parameters of samba3 Will not work: Clustering=yes <--unknown with testparm Idmap backend= tdb2 <--unknown with testparm Greeetings Daniel ----------------------------------------------- EDV Daniel M?ller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 T?bingen Tel.: 07071/206-463, Fax:

Hai,   Question..   2 DC's.  ( debian stretch samba 4.7.5 ) .   DC1 upgraded,  ( DC with FSMO roles)   samba-tool dbcheck --fix samba-tool dbcheck --cross-nc --fix   That fixed on DC1  6 errors. samba-tool drs showrepl show no error.   login on DC2. upgraded. samba-tool drs showrepl show no error and is in sync. samba-tool dbcheck --fix  shows 16 errors   uhm, synced, but not synced..   

Thanks for your attention. First, use local users at samba server, and client login success. [global] workgroup = H3C ONESTOR server string = %h server (Samba NAS) dns proxy = no log file = /var/log/samba/log.%m max log size = 100000 log level = 10 syslog = 0 panic action = /usr/share/samba/panic-action %d server role = standalone server obey pam restrictions = yes