headers
Andrew Bartlett | 1 Oct 2010 04:22
Picon
Favicon

Re: samldb and associated patches

On Fri, 2010-10-01 at 00:48 +0300, Kamen Mazdrashki wrote:
> Hi Matthias,
> 
> On Thu, Sep 30, 2010 at 21:39, Matthias Dieter Wallnöfer <mdw <at> samba.org>wrote:
> 
> > Hi Kamen,
> >
> > Kamen Mazdrashki wrote:
> >
> >> Hey Matthias,
> >>
> >>
> >> On Thu, Sep 30, 2010 at 09:53, Matthias Dieter Wallnöfer <mdw <at> samba.org<mailto:
> >> mdw <at> samba.org>> wrote:
> >>
> >>    So, Kamen & Andrew, if you like my work I hope that it will be
> >>    merged soon.
> >>
> >> IMHO, it is ok to be pushed. I would suggest though for you to wait until
> >> the
> >> end of the week - so that guys at plugfest to get the chance to test only
> >> what related patches. What do you think?
> >>
> > Okay, I can wait until what you say me: Saturday, Sunday?
> 
> 
> Sorry, it seems I've expressed myself in a wrong way - I can say you
> nothing of course :)
> It is just me that I don't want to push anything while Samba guys are
> testing
(Continue reading)

Permalink | Reply | 11 comments |
headers
Love Hörnquist Åstrand | 1 Oct 2010 06:58
Picon
Picon
Favicon

Re: heimdal and raw rsa parameters

Mattheiu,

This seems ok do do it, I'm fine with adding a type field to _hx509_parse_private_key() and
rsa_private_key_import so it can handle your format too. Today it only does DER.

Love

28 sep 2010 kl. 00.49 skrev Matthieu Patou:

> Hi Love,
> 
> First I really enjoyed meeting you at the SNIA plugfest was a real pleasure hope to see you next year !
> 
> Otherwise, my current usage of heimdal is pretty good and it seems to cover most of my needs.
> 
> The last bit I'm starting is using and storing the private key in the format MS AD do, this imply working with
RSA raw parameter like modulus, private exponent, public exponent, ... all of this stored in the little
endian format.
> 
> So basically I'll have a function that will create a function to transform the microsoft format to a RSA
hx509_private_key like this
> 
>        hx509_context hctx;
>        RSA *rsa;
> 
>        hx509_context_init(&hctx);
>        pk = talloc(mem_ctx, hx509_private_key);
> 
>        rsa = RSA_new();
>        rsa->n = BN_bin2bn(keypair->modulus.data, keypair->modulus.length, NULL);
(Continue reading)

Permalink | Reply | 0 comments |
headers
Matthias Dieter Wallnöfer | 1 Oct 2010 12:29
Picon
Favicon

Re: samldb and associated patches

abartlet,

I will look into it. Something could have changed in the meantime. 
Thanks for pointing this out.

Matthias

Andrew Bartlett wrote:
> On Fri, 2010-10-01 at 00:48 +0300, Kamen Mazdrashki wrote:
>    
>> Hi Matthias,
>>
>> On Thu, Sep 30, 2010 at 21:39, Matthias Dieter Wallnöfer<mdw <at> samba.org>wrote:
>>
>>      
>>> Hi Kamen,
>>>
>>> Kamen Mazdrashki wrote:
>>>
>>>        
>>>> Hey Matthias,
>>>>
>>>>
>>>> On Thu, Sep 30, 2010 at 09:53, Matthias Dieter Wallnöfer<mdw <at> samba.org<mailto:
>>>> mdw <at> samba.org>>  wrote:
>>>>
>>>>     So, Kamen&  Andrew, if you like my work I hope that it will be
>>>>     merged soon.
>>>>
>>>> IMHO, it is ok to be pushed. I would suggest though for you to wait until
(Continue reading)

Permalink | Reply | 0 comments |
headers
Kamen Mazdrashki | 1 Oct 2010 13:39
Picon
Favicon

Re: samldb and associated patches

On Fri, Oct 1, 2010 at 05:22, Andrew Bartlett <abartlet <at> samba.org> wrote:

>
> Out of interest, I combined the mdw/dsdb_work and
> kamenim/pylint-fix-build trees and tested, but the attached tests fail.
> (I only removed the changes to SAMR and the 'extra' tests, otherwise
> it's all the patches from both).
>
> hm, interesting.
It works for me - I tested with all patches merged.
In the end of the log I got following though:
http://samba.pastebin.com/sMbdmNW8

Flags for nTDSConnection objects are
systemFlags: 1073741824 (SYSTEM_FLAG_CONFIG_ALLOW_RENAME)

Matthias, do you have a clue why this might happen?

--

-- 
CU,
Kamen
Permalink | Reply | 9 comments |
headers
Donika Varbeva | 1 Oct 2010 14:32

Re: Smart Card Logon

> Hello,
>
> my name is Donika Varbeva I am a student in University Duisburg-Essen. I am
> writing my Bachelor thesis now on the theme Identity and Access Management.
> I built different IT-infrastructures using virtual machines in order to
> implement and test smart card log on on Windows and Linux server. Before a
> day i installed Samba 4 on my Linux server. I would like to ask You for some
> more information about smart card log on implementation from a
> Windows-client on the samba domain. I read lots of documents in Internet but
> still there is not so much information about and i have some difficulties. I
> know You probably have much more important work but if You can give me some
> tips (direction) it will be very helpful.
>
> Thank You very much in advance!
>
> Best Regards!
> Donika Varbeva
>
>
Permalink | Reply | 1 comment |
headers
Matthias Dieter Wallnöfer | 1 Oct 2010 18:37
Picon
Favicon

Re: samldb and associated patches

Hi Kamen,

please have a look at my updated branch. I didn't notice this error there.

Greets,
Matthias

Kamen Mazdrashki wrote:
>
>
> On Fri, Oct 1, 2010 at 05:22, Andrew Bartlett <abartlet <at> samba.org 
> <mailto:abartlet <at> samba.org>> wrote:
>
>
>     Out of interest, I combined the mdw/dsdb_work and
>     kamenim/pylint-fix-build trees and tested, but the attached tests
>     fail.
>     (I only removed the changes to SAMR and the 'extra' tests, otherwise
>     it's all the patches from both).
>
> hm, interesting.
> It works for me - I tested with all patches merged.
> In the end of the log I got following though:
> http://samba.pastebin.com/sMbdmNW8
>
> Flags for nTDSConnection objects are
> systemFlags: 1073741824 (SYSTEM_FLAG_CONFIG_ALLOW_RENAME)
>
> Matthias, do you have a clue why this might happen?
>
(Continue reading)

Permalink | Reply | 8 comments |
headers
Matthieu Patou | 1 Oct 2010 19:49
Picon
Favicon

Re: Smart Card Logon

  Hi Donika,

It used to work once, unfortunately it's not documented in the wiki yet, 
I put in copy people who used to work on this.
But please pay attention to the fact that we are quite busy and 
ressource limited so the reponse time can vary.

Matthieu.
On 01/10/2010 16:32, Donika Varbeva wrote:
>> Hello,
>>
>> my name is Donika Varbeva I am a student in University Duisburg-Essen. I am
>> writing my Bachelor thesis now on the theme Identity and Access Management.
>> I built different IT-infrastructures using virtual machines in order to
>> implement and test smart card log on on Windows and Linux server. Before a
>> day i installed Samba 4 on my Linux server. I would like to ask You for some
>> more information about smart card log on implementation from a
>> Windows-client on the samba domain. I read lots of documents in Internet but
>> still there is not so much information about and i have some difficulties. I
>> know You probably have much more important work but if You can give me some
>> tips (direction) it will be very helpful.
>>
>> Thank You very much in advance!
>>
>> Best Regards!
>> Donika Varbeva
>>
>>

--

--
(Continue reading)

Permalink | Reply | 0 comments |
headers
Kamen Mazdrashki | 1 Oct 2010 21:12
Picon
Favicon

Re: samldb and associated patches

Hi Matthias,

On Fri, Oct 1, 2010 at 19:37, Matthias Dieter Wallnöfer <mdw <at> samba.org>wrote:

> Hi Kamen,
>
> please have a look at my updated branch. I didn't notice this error there.
>
> Your new commit is not correct, please strip it off.

As I said before, this log message shows up once and a while.
I just can't find a way to reproduce it all the time (still) :(

--

-- 
CU,
Kamen
Permalink | Reply | 7 comments |
headers
Matthias Dieter Wallnöfer | 1 Oct 2010 21:38
Picon
Favicon

Re: samldb and associated patches

Hi Kamen,

I've removed the new commit. Well, for the log message I've really no idea.

Matthias

Kamen Mazdrashki wrote:
> Hi Matthias,
>
> On Fri, Oct 1, 2010 at 19:37, Matthias Dieter Wallnöfer <mdw <at> samba.org 
> <mailto:mdw <at> samba.org>> wrote:
>
>     Hi Kamen,
>
>     please have a look at my updated branch. I didn't notice this
>     error there.
>
> Your new commit is not correct, please strip it off.
>
> As I said before, this log message shows up once and a while.
> I just can't find a way to reproduce it all the time (still) :(
>
> -- 
> CU,
> Kamen
>
Permalink | Reply | 6 comments |
headers
Steven Danneman | 1 Oct 2010 22:39

RE: [PATCH] s3:events: Call all ready fd event handlers oneachiteration of the main loop


> -----Original Message-----
> From: samba-technical-bounces <at> lists.samba.org [mailto:samba-technical-
> bounces <at> lists.samba.org] On Behalf Of Steven Danneman
> Sent: Friday, September 17, 2010 12:31 AM
> To: Volker.Lendecke <at> SerNet.DE
> Cc: samba-technical <at> samba.org
> Subject: RE: [PATCH] s3:events: Call all ready fd event handlers
> oneachiteration of the main loop
> 
> > I think that actually does it. The most important piece is
> > that we start walking the fde list new after each handler
> > was called. The crash that was fixed was due to one socket
> > event triggering a TALLOC_FREE on a different fde. It was in
> > winbind: accept() on the listener socket triggered an idle
> > client to be thrown out, thus its fde would vanish. (iirc...)
> > This meant that the linked list had changed under our feet.
> >
> > While I have not tested it, I think that it can go in. A
> > heavily loaded winbind will probably pretty quickly show
> > this problem again. If you push it, can you also push a
> > revert of d5cf6482ed0cd, so that it will not confuse
> > anybody?
> 
> Yes, freeing fdes while iterating the linked list was definitely a
> problem with my first proposal.
> 
> I just ran into an issue of clients disconnecting while stress testing
> this patch from 10 WinXP clients with various file system operations:
>
(Continue reading)

Permalink | Reply | 0 comments |

Gmane