Andrew Bartlett | 1 Jan 2007 10:24
Picon
Favicon

Re: svn commit: samba r20394 - in branches/SAMBA_3_0/source: include lib smbd

On Fri, 2006-12-29 at 08:47 +0100, Volker Lendecke wrote:
> On Thu, Dec 28, 2006 at 02:24:16PM -0800, James Peach wrote:
> > What's the goal of this work? ie. can you give a idea of the final  
> > design that you are working towards?
> 
> Easy: Survive the Samba4 RAW-NOTIFY test.

Just been bored, and trawling RedHat's bugzilla:

You might want to look into this as a testcase:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218955

Andrew Bartlett

--

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
Andrew Bartlett | 1 Jan 2007 10:52
Picon
Favicon

[SAMBA4] New SWAT

Derrell,

I'm impressed by the new SWAT, and it looks like a great basis to build
from, but I'm worried:  Where did the old SWAT functionality go?

We don't seem to have any of the EJS pages any more:  Can we get these
back, in a window or something?  I hope we can continue to have these
simple form-based apps, as well as the more complex applications.

(Provisioning a server and joining/vampiring a domain look so much
better in demos with a web GUI...)

Also, where do things fit with the User manager developed for Summer of
Code?  I presume it's not practical to merge it with the new SWAT?  

Thanks,

Andrew Bartlett
--

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
Andrew Bartlett | 1 Jan 2007 13:46
Picon
Favicon

Re: [SAMBA4] New SWAT

On Mon, 2007-01-01 at 20:52 +1100, Andrew Bartlett wrote:
> Derrell,
> 
> I'm impressed by the new SWAT, and it looks like a great basis to build
> from, but I'm worried:  Where did the old SWAT functionality go?
> 
> We don't seem to have any of the EJS pages any more:  Can we get these
> back, in a window or something?  I hope we can continue to have these
> simple form-based apps, as well as the more complex applications.
> 
> (Provisioning a server and joining/vampiring a domain look so much
> better in demos with a web GUI...)
> 
> Also, where do things fit with the User manager developed for Summer of
> Code?  I presume it's not practical to merge it with the new SWAT?  

Finally, I'm interested in your plans about how authentication should
fit into all this.  We do need to secure SWAT up again...

Thanks,

Andrew Bartlett

--

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
derrell | 1 Jan 2007 21:51
Picon
Favicon

Re: [SAMBA4] New SWAT

Andrew Bartlett <abartlet <at> samba.org> writes:

> Derrell,
>
> I'm impressed by the new SWAT, and it looks like a great basis to build
> from

Thanks.

> , but I'm worried: Where did the old SWAT functionality go?
>
> We don't seem to have any of the EJS pages any more:  Can we get these
> back, in a window or something?  I hope we can continue to have these
> simple form-based apps, as well as the more complex applications.
>
> (Provisioning a server and joining/vampiring a domain look so much
> better in demos with a web GUI...)

There must be functionality that was there that I didn't see.  I didn't
remember seeing anything for provisioning.  I'll go back and look.  We
certainly can make the old pages available, particularly as an interim step
until that functionality is migrated to the new framework.

> Also, where do things fit with the User manager developed for Summer of
> Code?  I presume it's not practical to merge it with the new SWAT?  

I don't remember what that project accomplished.  I am well aware of mimir's
libnet and its ability to manage users.  One of the early additional modules I
foresee being added is, in fact, a user manager module with libnet as its
backend. 
(Continue reading)

derrell | 1 Jan 2007 21:53
Picon
Favicon

Re: [SAMBA4] New SWAT

Andrew Bartlett <abartlet <at> samba.org> writes:

> Finally, I'm interested in your plans about how authentication should
> fit into all this.  We do need to secure SWAT up again...

I've already started working on that.  The basis of it is already part of the
design of the "common" finite state machine code.  I'll have authentication
working within the next few days.

Derrell

Andrew Bartlett | 1 Jan 2007 22:31
Picon
Favicon

Re: [SAMBA4] New SWAT

On Mon, 2007-01-01 at 15:51 -0500, derrell <at> samba.org wrote:
> Andrew Bartlett <abartlet <at> samba.org> writes:
> 
> > Derrell,
> >
> > I'm impressed by the new SWAT, and it looks like a great basis to build
> > from
> 
> Thanks.
> 
> > , but I'm worried: Where did the old SWAT functionality go?
> >
> > We don't seem to have any of the EJS pages any more:  Can we get these
> > back, in a window or something?  I hope we can continue to have these
> > simple form-based apps, as well as the more complex applications.
> >
> > (Provisioning a server and joining/vampiring a domain look so much
> > better in demos with a web GUI...)
> 
> There must be functionality that was there that I didn't see.  I didn't
> remember seeing anything for provisioning.  I'll go back and look.  We
> certainly can make the old pages available, particularly as an interim step
> until that functionality is migrated to the new framework.

It was under 'install' in the old system.  We also had status pages, and
other things.  But more importantly, it was also a general ejs/html
system, which I expect will still be much easier for some of us to
expand (ensuring there is at least some web interface, if not a AJAX
interface, for most of Samba).

(Continue reading)

Andrew Bartlett | 2 Jan 2007 02:05
Picon
Favicon

[SAMBA4] Trouble with recursive depenencies

I've been having trouble of late with Samba's enforcing of non-recursive
dependencies, particularly for plugins to ldb.

We have quite a large array of plugins, and from time to time they
depend on things that depend on the credentials subsystem.  This then
depends on ldb, which depends on all the plugins.

As the recursive dependencies are only an issue if building shared
libraries, which would I presume use .so format plugins, can we remove
the recursive check?  

For the moment, I've worked around this at various times in various
ways:  mostly by breaking things up even more, but sometimes it gets
quite silly...

Andrew Bartlett
--

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
Andrew Bartlett | 2 Jan 2007 04:43
Picon
Favicon

Re: [Samba4] [Patch] Fixes and Improvements to samba3sam

On Thu, 2006-11-16 at 13:01 +0100, Martin Kühl wrote:
> Hi,
> 
> I've made a few improvements (I think) and modifications to the 
> samba3sam
> module while trying to link samba4 to an existing filled LDAP server 
> with the
> samba3 and samba4 schemas loaded.

Thanks for doing this.  I'm sorry it took so long for me to look at
them, but I've applied some of these:

> Find attached the series of patches to samba3sam.c I generated from this 
> work,
> the purpose of each summarized below:
> 
> - samba3sam-01-val_copy.patch:

Applied

> - samba3sam-02-sid-dont-talloc.patch:

Applied

> - samba3sam-03-passwd-convert.patch:

I've applied this, but using the existing conversion routines.

> - samba3sam-04-unixName-generate.patch:

(Continue reading)

Chetan S | 2 Jan 2007 12:14
Picon

samba configuration via rpc - beyond registry shares

Hi All,

I was looking towards extending the work by Volker on registry shares
(rpc) a bit further by allowing Samba configuration via rpc.
It is perfectly possible to link the registry rpc api to samba
internal calls to change the parameters.

However there is a problem here - how / should the changes be written
back to smb.conf. If not then how should the conflict be resolved ?

Volker put it a bit more nicely :
"Here we have to decide which setting we use in case of a conflict:
The smb.conf one or the registry one."

I need inputs / suggestions on this one.

thanks and regards,
Chetan S

Andrew Bartlett | 2 Jan 2007 12:50
Picon
Favicon

Re: [Samba4] Using existing samba3 data from an external LDAP with samba4

On Tue, 2006-10-24 at 17:40 +0200, Martin Kühl wrote:
> Hi,
> 
> The following are notes I've taken while trying to connect a samba4 
> service
> to the samba3 data contained in the LDAP directory of a UCS[1] system.
> 

> Attempted Solution #2: Schema extension
> =======================================
> 
> 2.1: Use the samba4 schema
> --------------------------
> 
> Install the OpenLDAP-formatted samba4 schema on X and make slapd load 
> it.
> Install the samba4 packages on Y, provision against the LDAP directory 
> of X.
> Samba3sam is not used in the process (yet).
> 
> Problems and Workarounds:
> * Some of the OIDs/attributes/objectClasses of the samba4 schema 
> conflict with
>   the schemas loaded by slapd.  (Most of these are duplicates.)
> -> Remove conflicting entries from the samba4 schema.
> 
> * The "person" objectClass is incompatible: a person object "must" 
> contain the
>   "sn" attribute, which isn't set for any samba4 objects.  "Person" here
>   includes users, groups and computers.
(Continue reading)


Gmane