Thanks...I just wondered why there has been a bump request up to now. ============================== Release Notes for Samba 3.2.0 July 1, 2008 ============================== This is the first stable release of Samba 3.2.0. Please be aware that Samba is now distributed under the version 3 of the new GNU General Public License. You may refer to the COPYING file that accompanies these release notes for further licensing details. Major enhancements in Samba 3.2.0 include: File Serving: o Use of IDL generated parsing layer for several DCE/RPC interfaces. o Removal of the 1024 byte limit on pathnames and 256 byte limit on filename components to honor the MAX_PATH setting from the host OS. o Introduction of a registry based configuration system. o Improved CIFS Unix Extensions support. o Experimental support for file serving clusters. o Support for IPv6 in the server, and client tools and libraries. o Support for storing alternate data streams in xattrs. o Encrypted SMB transport in client tools and libraries, and server. o Support for Vista clients authenticating via Kerberos. Winbind and Active Directory Integration: o Full support for Windows 2003 cross-forest, transitive trusts and one-way domain trusts. o Support for userPrincipalName logons via pam_winbind and NSS lookups. o Expansion of nested domain groups via NSS calls. o Support for Active Directory LDAP Signing policy. o New LGPL Winbind client library (libwbclient.so). o Support for establishing interdomain trust relationships with Windows 2008. Joining: o New NetApi library for domain join related queries (libnetapi.so) and example GTK+ Domain join gui. o New client and server support for remotely joining and unjoining Domains. o Support for joining into Windows 2008 domains.
for the record: I'm working on it. I hope I can commit a first version by the end of the week (together with a live-ebuild for ctdb :-)
Please also update mount-cifs so that it will be kerberos enabled. It should add /sbin/cifs.spnego utility. Thanks!
ebuild? just modify the 3.2-rc2 one ?
Although, I did that. It does not work directly because the 3.2.0 source has bad symlinks on libtalloc.
... and that's not the only problem. Unfortunately cifs.spnego needs a couple of samba libraries.
samba-3.2.1 is out with quite a few bugfixes: http://us3.samba.org/samba/history/samba-3.2.1.html
And the previous series is out-of-date as well, 3.0.31 was released almost 4 weeks ago.
And now 3.2.2 is released... *ping* and even more importantly, a word from the machine that goes 'bing!': 'bing!'
For your information, there is a testing ebuild in my overlay, here: http://git.overlays.gentoo.org/gitweb/?p=dev/dev-zero.git;a=tree;f=net-fs/samba;hb=HEAD It compiles and installs but I've got a couple of thinks I want to check before I'm putting it in the tree. If you wanna help, please test it.
(In reply to comment #9) > It compiles and installs but I've got a couple of thinks I want to check before > I'm putting it in the tree. If you wanna help, please test it. Hello, I don't see /sbin/cifs.spnego support, how will you support kerberos cifs client? I tried to do this using external package but it looks like it has some dependency with samba libraries.
(In reply to comment #10) > [...] > I don't see /sbin/cifs.spnego support, how will you support kerberos cifs > client? I tried to do this using external package but it looks like it has some > dependency with samba libraries. > That's one of the issues, yes. Currently I see no other way than providing mount.cifs in a separate package and keep cifs.spnego support in the main samba package. I know this sucks for client installations. The only two possibilities how I could help is by either adding a "minimal" USE-flag or by splitting samba in samba and samba-libs. But I'd really like to avoid that mess without proper package manager support.
if someone is curious on the new releases. have been using 3.2.2 under gentoo with selinux + hardened on x86 with a slightly modified samba_3.2.0_rc2.ebuild since the release; in production environment. it's working great, no stability issues, that I've seen. I got ldap backend, and running it as a PDC, 2 trusts with Windows 2008 servers, different directions, ~28500 local accounts in ldap, and it's really snappish, both on logons and file serving. it got a feeling of being one of the best releases. I had one problem, the tdb databases over the printer queues were cleared upon installation :) and I do miss the virus scanning patches. ;) (In reply to comment #8) > And now 3.2.2 is released... > > *ping* > > and even more importantly, a word from the machine that goes 'bing!': > > 'bing!' >
Any news here? :)
Samba 3.2.4 was released yesterday. Release notes are available at http://us3.samba.org/samba/history/samba-3.2.4.html.
(In reply to comment #9) > For your information, there is a testing ebuild in my overlay, here: > http://git.overlays.gentoo.org/gitweb/?p=dev/dev-zero.git;a=tree;f=net-fs/samba;hb=HEAD > > It compiles and installs but I've got a couple of thinks I want to check before > I'm putting it in the tree. If you wanna help, please test it. > It doesn't compile here. Log is from 3.2.4 (I just bumped your ebuild in the hope it fixed the issue, but it didn't): Linking bin/smbspool Linking bin/testparm lib/system.o: In function `sys_aio_suspend': system.c:(.text+0xfc): undefined reference to `aio_suspend64' lib/system.o: In function `sys_aio_fsync': system.c:(.text+0x10a): undefined reference to `aio_fsync64' lib/system.o: In function `sys_aio_error': system.c:(.text+0x118): undefined reference to `aio_error64' lib/system.o: In function `sys_aio_cancel': system.c:(.text+0x126): undefined reference to `aio_cancel64' lib/system.o: In function `sys_aio_return': system.c:(.text+0x134): undefined reference to `aio_return64' lib/system.o: In function `sys_aio_write': system.c:(.text+0x142): undefined reference to `aio_write64' lib/system.o: In function `sys_aio_read': system.c:(.text+0x150): undefined reference to `aio_read64' lib/system.o: In function `set_process_capability': system.c:(.text+0x7c4): undefined reference to `cap_get_proc' system.c:(.text+0x871): undefined reference to `cap_free' system.c:(.text+0x8dc): undefined reference to `cap_free' system.c:(.text+0x8eb): undefined reference to `cap_free' system.c:(.text+0x928): undefined reference to `cap_set_flag' system.c:(.text+0x943): undefined reference to `cap_set_flag' system.c:(.text+0x94b): undefined reference to `cap_set_proc' lib/access.o: In function `string_match': access.c:(.text+0x775): undefined reference to `yp_get_default_domain' lib/util.o: In function `automount_lookup': util.c:(.text+0x32a8): undefined reference to `yp_get_default_domain' util.c:(.text+0x32f3): undefined reference to `yperr_string' util.c:(.text+0x338f): undefined reference to `yp_match' util.c:(.text+0x3505): undefined reference to `yperr_string' collect2: ld returned 1 exit status make: *** [bin/cifs.upcall] Error 1 make: *** Waiting for unfinished jobs.... * * ERROR: net-fs/samba-3.2.4 failed. * Call stack: * ebuild.sh, line 49: Called src_compile * environment, line 2876: Called die * The specific snippet of code: * emake everything || die "emake everything failed" * The die message: * emake everything failed * * If you need support, post the topmost build error, and the call stack if relevant. * A complete build log is located at '/var/tmp/portage/net-fs/samba-3.2.4/temp/build.log'. * The ebuild environment file is located at '/var/tmp/portage/net-fs/samba-3.2.4/temp/environment'. * >>> Failed to emerge net-fs/samba-3.2.4, Log file: >>> '/var/tmp/portage/net-fs/samba-3.2.4/temp/build.log'
Created attachment 167872 [details] samba-3.2.4.ebuild I edited the 3.2.3 ebuild and renamed it to 3.2.4. Seems to work fine here with the following use flags: USE="acl caps cups fam pam readline winbind -ads -async -automount -cluster -doc -examples -ipv6 -kerberos -ldap -quotas (-selinux) -swat -syslog" Note that this ebuild does build and install the cifs helpers. I think a 'minimal' use flag should be introduced to install only the helpers if desired, instead of trying to keep a separate package in version sync. If you want to use the ebuild unedited and have installed the mount-cifs package you will want to uninstall it first.
Created attachment 167924 [details] samba-3.2.4.ebuild (In reply to comment #15) > (In reply to comment #9) > > For your information, there is a testing ebuild in my overlay, here: > > http://git.overlays.gentoo.org/gitweb/?p=dev/dev-zero.git;a=tree;f=net-fs/samba;hb=HEAD > > > > It compiles and installs but I've got a couple of thinks I want to check before > > I'm putting it in the tree. If you wanna help, please test it. > > > > It doesn't compile here. Log is from 3.2.4 (I just bumped your ebuild in the > hope it fixed the issue, but it didn't): The problem occurs with cifs.upcall (renamed from cifs.spnego). I don't know how to fix it but if you can live without client side cifs spnego support this updated ebuild should work with USE="-cifs_spnego". Chris
(In reply to comment #17) > The problem occurs with cifs.upcall (renamed from cifs.spnego). I don't know > how to fix it ... Thanks Chris. I'll try your ebuild. Best regards, Norberto
"without client side cifs spnego support" means I can't for example use smbclient like this: smbclient -kL localhost ?
(In reply to comment #19) > "without client side cifs spnego support" means I can't for example use > smbclient like this: > > smbclient -kL localhost > > ? > Actually I think it's more specific to using "mount -t cifs ....", but don't hold my feet to the fire :)
Created attachment 167970 [details] samba-3.2.4.ebuild Just a slight clean up. Still no clue on fixing the cifs spnego issue other than the workaround of not building cifs.upcall.
Somewhat OT: Samba-3.2.4 seems to not play well with kerberos (at least my MIT setup) where 3.0.32 works flawlessly. Anyone knows if there were any changes to the kerberos code? I've read the official samba howto 3.2, but it says there're no (critical) changes between 3.0.x and 3.2.x ... :-/ Thanks!
(In reply to comment #19) > "without client side cifs spnego support" means I can't for example use > smbclient like this: It appears that cifs upcall support is available in later kernels (Kerberos/SPNEGO advanced session setup). There may be no need to build it when building Samba - but I'm certainly no authority in this area :)
Any news on getting 3.2.4 into the tree?
o CVE-2008-4314 Samba 3.0.29 to 3.2.4 can potentially leak arbitrary memory contents to malicious clients.
Hi, Samba 3.2.5 is released with a bugfix for the CVE reported problem. But when I try to compile I getting this error here until the linking process Linking bin/smbclient lib/access.o: In function `string_match': access.c:(.text+0x805): undefined reference to `yp_get_default_domain' collect2: ld returned 1 make: *** [bin/cifs.upcall] Error 1 emerge log: http://pastebin.com/mac7b5c3 emerge info: http://pastebin.com/m4610c0eb
FYI: 3.2.6 is out, and copying/unmasking the attached 3.2.4 ebuild built right away. I'm running it as we speak and everything still seems to work fine. My flags for reference: USE="async caps cups fam pam readline -acl -ads -automount -cifs_spnego -cluster -doc -examples -ipv6 -kerberos -ldap -quotas (-selinux) -swat -syslog -winbind" hope this helps.
Created attachment 176654 [details] Updated ebuild with fixed symlinks The latest ebuild with warnings removed and added symlinks for all libraries, without which a newly installed smbd wouldn't start.
(In reply to comment #28) > and added symlinks for all libraries, > without which a newly installed smbd wouldn't start. I just found out that kio_smb from kdebase-kioslaves:3.5 package breaks without these symlinks. Thanks for the fixed ebuild.
Created attachment 177770 [details] samba-3.2.7.ebuild simply a renamed samba-3.2.6 ebuild
Created attachment 177772 [details] build log from samba-3.2.7 Hi, I got another linking error until I tried to install the samba-3.2.7 package. Please have a look on this build log for more informations. regards j0inty
*** Bug 255532 has been marked as a duplicate of this bug. ***
Created attachment 179080 [details, diff] samba-3.2.7.ebuild_cifsupcall-useflag.patch Hi@ll, with that patch for the samba-3.2.7.ebuild I was able to compile the samba 3.2.7 for me. # USE="-cifsupcall" emerge -av samba That was the command that I used for. regards j0inty
Created attachment 179087 [details] samba-3.2.7 build log of successfull compile with "-cifsupcall" useflag
samba-3.3 is out...
Created attachment 179932 [details] ebuild for 3.3.0 Here you go - only needed removal of the shared library symlinks. Not sure what the previous poster's cifsupcall USE flag is about (if that's till relevant please someone feel free to add it). I only need basic functionality and this works for me.
As upstream has released 3.3.0, I'm changing this bug accordingly.
BTW, There has been a lot of talk today on the samba mail list about an ACL bug / change from the previous behavior with the 3.3.0 release. Here is the thread: http://www.mail-archive.com/samba@lists.samba.org/msg98583.html
3.3.0 doesn't build for me. install: cannot stat `/var/portage/net-fs/samba/files/config-3.3/smbusers': No such file or directory !!! doins: /var/portage/net-fs/samba/files/config-3.3/smbusers does not exist install: cannot stat `/var/portage/net-fs/samba/files/config-3.3/lmhosts': No such file or directory !!! doins: /var/portage/net-fs/samba/files/config-3.3/lmhosts does not exist !!! newins: /var/portage/net-fs/samba/files/config-3.3/smb.conf.example-samba3 does not exist !!! newins: /var/portage/net-fs/samba/files/config-3.3/samba.pam does not exist also * QA Notice: file does not exist: * * doins: /var/portage/net-fs/samba/files/config-3.3/smbusers does not exist * doins: /var/portage/net-fs/samba/files/config-3.3/lmhosts does not exist * newins: /var/portage/net-fs/samba/files/config-3.3/smb.conf.example-samba3 does not exist * newins: /var/portage/net-fs/samba/files/config-3.3/samba.pam does not exist * QA Notice: Unrecognized configure options: * * configure: WARNING: unrecognized options: --with-libdir, --without-spinlocks, --with-manpages-langs * configure: WARNING: unrecognized options: --with-libdir, --without-spinlocks, --with-manpages-langs [ebuild N ] net-fs/samba-3.3.0 USE="acl cups pam readline syslog -ads -async -automount -caps -doc -examples -fam -ipv6 -ldap -quotas (-selinux) -swat -winbind" LINGUAS="-ja -pl" 0 kB
(In reply to comment #39) > 3.3.0 doesn't build for me. You need to cp -r files/config-3.2 to files/config-3.3 - probably should have mentioned that.
ah... that did it thanks.
Created attachment 181021 [details] samba-3.2.8.ebuild that is a simply renamed 3.2.7 ebuild ============================= Release Notes for Samba 3.2.8 March 03, 2009 ============================= This is a bug fix release of the Samba 3.2 series. Major enhancements included in Samba 3.2.8 are: o Correctly detect if the current DC is the closest one. o Add saf_join_store() function to memorize the DC used at join time. This avoids problems caused by replication delays shortly after domain joins. The original security announcement for this and past advisories can be found http://www.samba.org/samba/security/ ###################################################################### Changes ####### Changes since 3.2.7 ------------------- o Michael Adam * BUG 6066: netinet/ip.h present but cannot be compiled under Solaris. * Fix join by creating keytab after changing the config in libnet. * Streamline logic of libnet_join_post_processing() in libnet_join. * Fix build of [u]mount.cifs in the RHEL packaging. * Fix distclean target and add realdistclean target in the docs build. * Clean generated .png images and build/catalog.xml in "make clean". * Fix detection of netinet/ip.h on Solaris 8. o Jeremy Allison * BUG 4308: Excel save operation corrupts file ACLs. * BUG 5979: Fix level 2 oplocks. * BUG 5980: Fix race condition when granting level2 oplocks can cause break notify to be missed. * BUG 5986: Fix renaming of streams. * BUG 5990: Strict allocate should be checked before ftruncate. * BUG 6009: Setting "min receivefile size = 1" breaks writes. * BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict. * BUG 6017: Fix magic scripts. * BUG 6019: Fix file corruption in Clustered SMB/NFS environments managed via CTDB. * BUG 6021: smbclient du command does not recuse properly. * BUG 6030: Add missing header in Status page. * BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery. * BUG 6040: Calling Samba print server with an aliased DNS-name fails. * Fix race condition in alarm lock processing. * Fix logic bug introduce in backport of ccache_regain_all_now. * Fix crash bug in SWAT. * Fix logic error in try_chown. * Fix detection of dns_sd libraries. o Kai Blin * BUG 5953: Fix smbclient crashes. o Gerald (Jerry) Carter * Fix "allow trusted domain" so it disables trusted domains. o Guenther Deschner * Fix buffer allocation in eventlog read call. * Fix various invalid memcpy in read_package_entry(). o SATOH Fumiyasu * Variables for signals must be volatile sig_atomic_t in Winbind. * Fix gmem->numgids and gmem->maxgids breakage on Solaris 64-bit. * Fix a compile-time warning. * Fix SIGBUS on non-x86 CPUs in libsmbclient. o Björn Jacke * Correct the description of the "ldap timeout" parameter. * Fix build with external dns_sd libraries. o Jeff Layton * Allow mounts to ipv6 capable servers in mount.cifs. o Volker Lendecke * BUG 5933: Fix incrementing/decrementing num_validated_vuids. * BUG 5953: Make cli_send_smb_direct_writeX use writev. * BUG 5965: Fix creation of the first share using SWAT. * BUG 5969: Optimize smbclient put command. * BUG 6014: mget shouldn't segfault without arguments. * Fix error code when smbclient puts a file over an existing directory. * Fix a valgrind error. * Fix a "ignoring function call result" warning. * Add sys_writev. * Add write_data_iov. * Make write_data use write_data_iov. * Fix a memory leak in cups_pull_comment_location. * Fix an ancient uninitialized variable read. * Fix a bad memleak in vfs_full_audit. * Fix several valgrind errors. * Fix 'net rpc join' for users with the SeMachineAccountPrivilege. o Herb Lewis * Don't return 0 on error in smbcacls - bad for scripts. o Derrell Lipman * Determine case sensitivity based on file system attributes in libsmbclient. o Stefan Metzmacher * Correctly detect if the current dc is the closest one. * Use get_dc_name() instead of get_sorted_dc_list() in the LDAP case. * Fallback to returning all DCs, when none is available in the requested site. * Add saf_join_store() function. * Use DS_FORCE_REDISCOVERY in libnet_join. * Use dbwrap to open sessionid.tdb in net status. * Fix dbwrap_store_uint32() to match dbwrap_store_int32(). * Handle the SMB signing states the same in the krb5 and ntlmssp cases in libsmb. * Re-add "fileid:algorithm" as option in vfs_fileid. * Add vfs_fileid manpage. o Lars Mueller * Tweak with pam defines of older Linux versions. * Adjust regex to match variable names including underscores. * Conditional install of the cifs.upcall man page. o Tim Prouty * Fix stream marshalling to return the correct streaminfo status. * Fix a delete on close divergence from Windows. * Allow renames of streams via NTRENAME and fix stream error codes on rename. * Remove a few unnecessary checks from the streams depot module and fix to work with NTRENAME. * Remove a few unnecessary checks from the streams xattr module. * Remove a few unnecessary checks from the streams xattr module. o Andreas Schneider * Fix a segfault if ? is there but the options are NULL. * Avoid flooding of syslog with failing pam_putenv messages. * Document default of the printing config variable. * Use talloc_tos() instead of the talloc NULL context. o Karolin Seeger * BUG 6058: Use 'make distclean' instead of 'make clean' in build_docs. * BUG 6000: Avoid bashism in perfcount.init. * Change default value for "ldap ssl" to "start tls". * Several documentation improvements/typo fixes. * Fix syntax error in samba.spec.tmpl. * Check if Unix account exists before asking for the password in smbpasswd. * Add manpage for vfs_shadow_copy2. o Richard Sharpe * Fix mistake in DEBUG message. o Andrew Tridgell * Keep compatibility with v3-0-ctdb name for fileid:mapping option. o Bo Yang * Clean event context after child is forked. * Refresh sequence number as soon as possible. * Don't set child->requests to NULL in parent after fork. * Backport of the clean event context after fork and krb5 refresh chain fixes. * Fix null pointer refrence in event context. * Don't send message to any other child in child process. * Fix bug in get_dc_name_via_netlogon(), null pointer refrence.
New version: samba-3.3.1 This is the latest bugfix release release of the Samba 3.3 series. Major enhancements in Samba 3.3.1 include: * Fix net ads join when "ldap ssl = start tls" (bug #6073). * Fix renaming/deleting of files using Windows clients (bug #6082). * Fix renaming/deleting a "not matching/resolving" symlink (bug #6090). * Fix remotely adding a share via the Windows MMC. ---- Builds fine with the samba 3.3.0 ebuild on amd64 (otherwise stable).
Created attachment 184476 [details] Updated ebuild for 3.3.1 (with fixes necessary for 3.3.0) Updated ebuild for 3.3.1. Fixed wrong configure options: --with-libdir : renamed to --with-modulesdir (see http://samba.org/samba/history/samba-3.3.0.html) --without-spinlocks, --with-manpages-langs : Removed, no new equivalent
The latest 3.3.1 ebuild works well here. If the maintainer is too busy to work on samba, perhaps it'd be advantageous to have a dev commit to ~arch, and get more visibility on build? The latest in portage is quite dated.
Please check out my overlay for what I'm working on for samba-3.3.1: http://git.overlays.gentoo.org/gitweb/?p=dev/dev-zero.git;a=tree;f=net-fs/samba-libs;hb=HEAD Since upstream released a couple of libraries with a stable api, I'm gonna split samba. gvfs already compiles with samba-libs only. samba-client and samba-server or gonna follow (hopefully) soon.
(In reply to comment #46) > Please check out my overlay for what I'm working on for samba-3.3.1: > > http://git.overlays.gentoo.org/gitweb/?p=dev/dev-zero.git;a=tree;f=net-fs/samba-libs;hb=HEAD > > Since upstream released a couple of libraries with a stable api, I'm gonna > split samba. > > gvfs already compiles with samba-libs only. > samba-client and samba-server or gonna follow (hopefully) soon. Are you planning to release some samba-meta package as well? Although I don't use samba-server that often, I'd like to have all parts of samba installed.
Hmm, I guess that I can make the current net-fs/samba the meta package. This would also make the transition smoother
Short status update: http://git.overlays.gentoo.org/gitweb/?p=dev/dev-zero.git;a=tree;f=net-fs;hb=HEAD has it all. Even though samba-server doesn't include everything needed (have to write a sane default config, add upgrade informations, etc.) it is ready to be tested for early adopters. A replacement for mount-cifs is also available: just build samba-client with USE=minimal, this will also skip the configure-run. Except if you specified ads together with minimal, then configure is run and cifs.upcall gets built.
Latest samba release is 3.3.2 as of 2009-03-12.
ok, updated samba-{libs,client,server} are in my overlay. I have it running on my machine without any problems. It still needs some work in the field of to ADS, LDAP, KERBEROS and AFS, but for a standard standalone installation it should be ready. After adding examples and doing some checks I'll push it in the the tree. A meta net-fs/samba ebuild is also in my overlay. Please test and report (you can also send me mails and we can discuss it directly if you're not comfortable with bugzilla).
(In reply to comment #51) > ok, updated samba-{libs,client,server} are in my overlay. > I have it running on my machine without any problems. It still needs some work > in the field of to ADS, LDAP, KERBEROS and AFS, but for a standard standalone > installation it should be ready. > After adding examples and doing some checks I'll push it in the the tree. > A meta net-fs/samba ebuild is also in my overlay. > Please test and report (you can also send me mails and we can discuss it > directly if you're not comfortable with bugzilla). > Looks like the net-fs/samba package won't install due to "Corruption": # emerge samba-libs samba-client samba-server =net-fs/samba-3.3.2 -pv These are the packages that would be merged, in order: Calculating dependencies | * A file is not listed in the Manifest: '/usr/local/portage/layman/dev-zero/net-fs/samba/samba-3.2.4.ebuild' ... done! !!! All ebuilds that could satisfy "=net-fs/samba-3.3.2" have been masked. !!! One of the following masked packages is required to complete your request: - net-fs/samba-3.3.2 (masked by: corruption) For more information, see the MASKED PACKAGES section in the emerge man page or refer to the Gentoo Handbook.
(In reply to comment #52) > Looks like the net-fs/samba package won't install due to "Corruption": > # emerge samba-libs samba-client samba-server =net-fs/samba-3.3.2 -pv > > These are the packages that would be merged, in order: > > Calculating dependencies | * A file is not listed in the Manifest: > '/usr/local/portage/layman/dev-zero/net-fs/samba/samba-3.2.4.ebuild' > ... done! > > !!! All ebuilds that could satisfy "=net-fs/samba-3.3.2" have been masked. > !!! One of the following masked packages is required to complete your request: > - net-fs/samba-3.3.2 (masked by: corruption) > > For more information, see the MASKED PACKAGES section in the emerge > man page or refer to the Gentoo Handbook. > sorry for that, should be fixed by now
(In reply to comment #51) > ok, updated samba-{libs,client,server} are in my overlay. In case of USE=ads, samba-client should depend on sys-apps/keyutils. If the keyutils package is not installed, building of cifs.upcall fails with client/cifs.upcall.c:28:22: Error: keyutils.h not found Best regards, Torsten
btw, there are file collisions with mount-cifs probably need to a block in samba-client for this. * Detected file collision(s): * * /sbin/mount.cifs * /usr/share/man/man8/mount.cifs.8.bz2 * /usr/share/man/man8/umount.cifs.8.bz2 * * Searching all installed packages for file collisions... * * Press Ctrl-C to Stop * * net-fs/mount-cifs-3.0.30 * /sbin/mount.cifs * /usr/share/man/man8/mount.cifs.8.bz2 * /usr/share/man/man8/umount.cifs.8.bz2 * * Package 'net-fs/samba-client-3.3.2' NOT merged due to file collisions. * If necessary, refer to your elog messages for the whole content of the * above message.
* Messages for package net-fs/samba-client-3.3.2: * [...] * * Detected file collision(s): * * /usr/bin/smbcacls * /usr/share/man/man1/smbcacls.1.lzma * * Searching all installed packages for file collisions... * * Press Ctrl-C to Stop * * net-fs/samba-server-3.3.2 * /usr/bin/smbcacls * /usr/share/man/man1/smbcacls.1.lzma
@Torsten: solved, thanks @Ryan: block added, thanks @Dennis: thanks, I removed smbcacls from samba-server and moved smbcquotas from samba-server to samba-client. You might want to reinstall with FEATURES="-collision-protect".
Also, /etc/samba/smb.conf or at least /etc/samba/smb.conf.default should be installed with samba-client , not just with samba-server
The problem is that I can't install it from both (collisions). I currently tend to not install it at all (as now with samba-server which installs only a smb.conf.default). I know that there are warnings from the client-stuff if smb.conf is not present though. Ideas?
Install .default to /usr/share/doc/${P}/ for each of client/server maybe?
Created attachment 186653 [details] build.log I get this error with USE="afs"
Created attachment 186655 [details] This is my emerge --info
Created attachment 187697 [details] Fix the as-needed issue from comment #15 This pathc fixes the as-needed issue reported in comment #15
+*samba-3.2.11 (23 Apr 2009) + + 23 Apr 2009; Patrick Lauer <patrick@gentoo.org> +samba-3.2.11.ebuild: + Adding samba-3.2.11 ebuild based on the 3.2.8 ebuild from bug #231273. + Thanks to Steffen Stollfuß and all the other people who worked on it and + tested it. I removed the cifsupall useflag for now, ebuild seems to work for me. samba-3.2 is masked for now, if there are no issues in testing it can be unmasked soon. I'll await the work on 3.3 in dev-zero's overlay and hope we can get that into the tree soon!
The cifsupall is the major reason for upgrading...
Fairly new to reporting things so I'm not sure what all you need. I just installed Samba 3.2.11 from the hard mask build (thank you very much for getting that into the tree, btw) and when attempting to run smbd or the net command I get the following error - error while loading shared libraries: libwbclient.so.0: cannot open shared object file: No such file or directory I can see the file exists in /usr/lib/samba. I added a conf file in /etc/env.d/ to add that path to LDCONFIG and re-ran env-update, ldconfig. This seems to have gotten it working for me. This was done on a brand new install using stage3-i686-20090422.tar.bz2 and I'm not sure if that could be to blame somehow but it seems possible. Please let me know if you need any other info.
(In reply to comment #66) > error while loading shared libraries: libwbclient.so.0: cannot open shared > object file: No such file or directory > > I can see the file exists in /usr/lib/samba. I added a conf file in > /etc/env.d/ to add that path to LDCONFIG and re-ran env-update, ldconfig. Same problem here. I made a link in /usr/lib(64) to the file in /usr/lib(64)/samba which got around the issue.
Same problem here as well. Manually symlinking samba/libwbclient.so solved this for me too. Perhaps one should update the ebuild, so that the symlinks for libwbclient are created like the ones for libsmbclient if the winbind use flag is set.
(In reply to comment #65) > The cifsupall is the major reason for upgrading... > Seconded. This needs to be put back into the package.
dev-zero, A couple of comments. 1: samba-client in your overlay fails with --as-needed and needs the patch provided by Steffen Hau on the 8th of april. 2: In the init script has the commented "echo ${cmd} '->' ${!cmd}" which needs to be updated cmd_exec instead of cmd. 3: You missed --with-piddir=/var/run/samba in your overlay ebuild. This makes the init script fail to stop the services looking for the pid files in /var/run/samba and this is empty. storage source # /etc/init.d/samba start samba |* samba -> start: smbd... samba |start-stop-daemon --start --quiet --exec /usr/sbin/smbd -- -D -> [ ok ] | samba |* samba -> start: nmbd... samba |start-stop-daemon --start --quiet --exec /usr/sbin/nmbd -- -D -> [ ok ] | storage source # ls -l /var/run/samba/ total 0 storage source # ls -l /var/run/{s,n}mbd.pid -rw-r--r-- 1 root root 6 May 25 15:00 /var/run/nmbd.pid -rw-r--r-- 1 root root 6 May 25 15:00 /var/run/smbd.pid storage source # /etc/init.d/samba stop samba |* samba -> stop: smbd... samba |start-stop-daemon --stop --quiet --pidfile /var/run/samba/smbd.pid -> [ ok ] | samba |* samba -> stop: nmbd... samba |start-stop-daemon --stop --quiet --pidfile /var/run/samba/nmbd.pid -> [ ok ] |
The init file in git 3.3.4 does not work properly. The pid files get put in /var/run/ and not /var/run/samba therefore although the processes start just fine the init file cannot stop them because it looks in /var/run/samba for the pid files which aren't there. If you manually move the pid files from /var/run to /var/run/samba then the init file can stop the processes.
With git 3.3.4 ebuilds the lowcase.dat, upcase.dat, and valid.dat files in the codepages directory do not get installed in /usr/lib/samba causing, if nothing else, testparm to throw up an error for the missing valid.dat.
With git 3.3.4 ebuilds the smb.conf man page does not get installed.
Created attachment 194809 [details, diff] diff for dev-zero git 3.3.4 ebuild When applied to dev-zero's git 3.3.4 (as it is now) fixes my comments #71 and #73.
(In reply to comment #74) > Created an attachment (id=194809) [edit] > diff for dev-zero git 3.3.4 ebuild > > When applied to dev-zero's git 3.3.4 (as it is now) fixes my comments #71 and > #73. To clarify that is the samba-server-3.3.4.ebuild I'm referring to.
Created attachment 194819 [details, diff] diff for dev-zero current git of samba-server-3.3.4.ebuild This diff for the current dev-zero git of samba-server-3.3.4.ebuild fixes all 3 issues listed in comments #'s 71,72, and 73.
And now with 3.3.5 being released the ebuilds seem to work fine when renamed (replace 3.3.4 with 3.3.5 - as well as for the missing includes file for samba-client). Although I haven't really tested in a production environment. If anybody does please report on success/failure. slight rant: Gentoo was once a great distro (the best, IMO) for running an office as a Domain Controller but without a Samba dev those days are numbered. I see Samba as one of the most critical apps in the 'nix world and consider this a sad state of affairs. If I had the skill set I would freely take over the task. Alas I don't but will always contribute what I can. However, it seems the day is coming when a different distro will have to replace my beloved Gentoo solely due to the lack of Samba support.
Note that samba 3.3.5 is the first version which can have Windows 7 join the samba domain. That'll be quite significant in the near future.
Samba 3.3.6 Security Release Available http://news.samba.org/releases/3.3.6/ http://us1.samba.org/samba/security/CVE-2009-1886.html http://us1.samba.org/samba/security/CVE-2009-1888.html
So here's some good news: The 3.3.6 ebuilds are committed to the tree And some bad news: They are masked. There are still some issues, especially the tests failing. Any improvements, patches and other feedback welcome (and I hope we can get this bug closed soon!)
Again... cifsupcall is very important feature of this new release. Why is it disabled?
(In reply to comment #81) > Again... cifsupcall is very important feature of this new release. > Why is it disabled? > Because it changes a few things - extra dependencies, use flags need to be enabled etc. And I have no way of really testing it. With 3.2.13-r2 I've added it. It compiles, but I have no idea if it works, so please test and report back.
(In reply to comment #82) > (In reply to comment #81) > > Again... cifsupcall is very important feature of this new release. > > Why is it disabled? > > > With 3.2.13-r2 I've added it. It compiles, but I have no idea if it works, so > please test and report back. WORKING!!! Please note that the upcall should be part of the mount-cifs or samba-client and not the server side. Configuration: # Details at: # http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=403700 # need to remove this check so all users may use same mount point chown ${USER} /mnt/tmp # Details at: # http://bugs.gentoo.org/show_bug.cgi?id=186383 # Please reopen. # Please add USE flag just like any other mount helper. chmod u+s /usr/bin/mount.cifs /usr/bin/umount.cifs ## /etc/request-key.conf: [Add] create cifs.spnego * * /usr/sbin/cifs.upcall -c %k create dns_resolver * * /usr/sbin/cifs.upcall %k ## /etc/fstab: [Add] //s/s /mnt/tmp cifs password=,sec=krb5i,user,nosetuids 0 0 # Get TGT $ kinit # Mount $ mount /mnt/tmp
> # Details at: > # http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=403700 > # need to remove this check so all users may use same mount point > chown ${USER} /mnt/tmp And there is: https://bugzilla.samba.org/show_bug.cgi?id=1617 Which was recently closed... Which trunk? Was it released? Can we backport the patch?
Could someone please add my patch for samba-3.2 ebuilds? Otherwise, compile would fail, if cifsupcall use flag is set. I've checked if my patch applies fine to the Makefile.in of 3.2.13-r2 and it does. The patch needs to be slightly modified, to fit in the 3.2.13 ebuilds. I removed the source from tha path in patch header and inserted an epatch at the end src_unpack method in the ebuild. Cheers, Steffen
*** Bug 276882 has been marked as a duplicate of this bug. ***
(In reply to comment #80) > The 3.3.6 ebuilds are committed to the tree Great, but why is it updating my init scripts to look for the pid files in /var/run instead of /var/run/samba where they actually are? Also the #echo ${cmd} '->' ${!cmd} line should be changed to #echo ${cmd_exec} '->' ${!cmd_exec}. Deja vu from comment #70....
(In reply to comment #87) > Great, but why is it updating my init scripts to look for the pid files in > /var/run instead of /var/run/samba where they actually are? Looks like patch re: Comment #76 (brought up in Comment #70) was applied (providing the --with-piddir arg) which fixed the problem but then the samba.confd file was also changed - 2 fixes when only one was needed. Like a double negative is a positive, fixing it in both places borked it.
I think version 3.3.6 seems to be working fine. I had no problems with the emerge on amd64. I was having a lot of issues in using my share as a timemachine backup drive for OSX with the ~amd64 version(amongst my issues of OSX even finding the share), and simply upgrading to this hardmasked version solved all of the errors I was having trying to communicate with OSX. I have seen other reports of this problem with other distributions, not necisarrily gentoo so I am very happy with the ebuild in the portage tree.
Hi, A new version bump of the 3.3 tree was released. http://news.samba.org/releases/3.3.7/ PS: I'm using the samba server and client in version <= 3.3.6 (dev-zero overlay) over a month in daily buisness, without any problems on ~x86 and ~amd64 systems. (not as an domain controller only as simple fileserver for windoof) regards j0inty
(In reply to comment #90) > PS: I'm using the samba server and client in version <= 3.3.6 (dev-zero > overlay) over a month in daily buisness, without any problems on ~x86 and > ~amd64 systems. (not as an domain controller only as simple fileserver for > windoof) It certainly has not been working too well for me. winbindd in 3.3.6 keeps crashing all the time. [2009/08/13 21:17:14, 0] lib/fault.c:fault_report(40) =============================================================== [2009/08/13 21:17:14, 0] lib/fault.c:fault_report(41) INTERNAL ERROR: Signal 11 in pid 28580 (3.3.7) Please read the Trouble-Shooting section of the Samba3-HOWTO [2009/08/13 21:17:14, 0] lib/fault.c:fault_report(43) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2009/08/13 21:17:14, 0] lib/fault.c:fault_report(44) =============================================================== [2009/08/13 21:17:14, 0] lib/util.c:smb_panic(1673) PANIC (pid 28580): internal error [2009/08/13 21:17:14, 0] lib/util.c:log_stack_trace(1777) BACKTRACE: 16 stack frames: #0 /usr/sbin/winbindd(log_stack_trace+0x1c) [0x7fe60e6928c6] #1 /usr/sbin/winbindd(smb_panic+0x5b) [0x7fe60e6929d3] #2 /usr/sbin/winbindd [0x7fe60e67f9f1] #3 /lib/libc.so.6 [0x7fe60c7226d0] #4 /usr/sbin/winbindd [0x7fe60e61143b] #5 /usr/sbin/winbindd [0x7fe60e61376a] #6 /usr/sbin/winbindd [0x7fe60e5fd9f0] #7 /usr/sbin/winbindd [0x7fe60e5f1563] #8 /usr/sbin/winbindd [0x7fe60e5f2b54] #9 /usr/sbin/winbindd [0x7fe60e61e2a4] #10 /usr/sbin/winbindd [0x7fe60e61889c] #11 /usr/sbin/winbindd [0x7fe60e618092] #12 /usr/sbin/winbindd [0x7fe60e5ec928] #13 /usr/sbin/winbindd(main+0xd17) [0x7fe60e5ed72b] #14 /lib/libc.so.6(__libc_start_main+0xe6) [0x7fe60c70ea26] #15 /usr/sbin/winbindd [0x7fe60e5eb789] [2009/08/13 21:17:14, 0] lib/fault.c:dump_core(231) dumping core in /var/log/samba/cores/winbindd It may well be that my winbind configuration is not correct, but this should not crash the daemon. Updating to 3.3.7 (by renaming the ebuilds) did not help either. winbind in 3.2.12-r3 did not exhibit this behavior.
Hey guys, is there an obvious reason, why my patch does not get included into the ebuild? This is a very annoying thing, that I always have to manually build samba with the ebuild command instead of let emerge do it. Cheers, Steffen
I installed samba-server and swat refuses to start. It returns http status code 500 and complains that it cannot chdir somewhere. With google's help (and confirmed by strings $(which swat) | grep 'doc/') I found out, that /usr/share/doc/samba-server-3.3.6/swat directory does not exist. Mkdir fixes the issue.
Once again the demand, to add my patch to the ebuild for the samba 3.2 release. I asked in the corresponding bug entry in samba's bugzilla (see https://bugzilla.samba.org/show_bug.cgi?id=6105#c7) and they told me, that 3.2 has been turned into security fixes only mode. I don't know, why noone has put it into the new ebuild for 3.2.14... Is there a obvious reason?
Just installed net-fs/samba-3.3.7, A few questions: 1. samba-libs are dependency of the root package, but there is no USE dependency. Can you please consider adding USE flags to the samba root package so there will be no conflict between the packages? (ads?, cluster?, caps?,cups?,ldap?,syslog?,winbind?) This way one can set USE flag only for the root package. 2. Can you please consider adding suid to the samba-client package, so that mount.cifs/umount.cifs will be marked as suid, and allow users to mount using kerberos delegation? This is works nicely if I add suid manually. Thanks!
Hi all - what's happening with this? Samba 3.4.0 has been out for a couple of months and 3.4.1 has been out for a couple of weeks, but neither of them have been added to Portage. Is there something preventing them from being added?
(In reply to comment #96) > Hi all - what's happening with this? Samba 3.4.0 has been out for a couple of > months and 3.4.1 has been out for a couple of weeks, but neither of them have > been added to Portage. Is there something preventing them from being added? Lack of man power/time...simple as that.
(In reply to comment #96) > Hi all - what's happening with this? Samba 3.4.0 has been out for a couple of > months and 3.4.1 has been out for a couple of weeks, but neither of them have > been added to Portage. Is there something preventing them from being added? > Well, as 3.4 is an intermediate release for samba4 it has the samba4 source included. The build system and many paths are slightly different now, so it requires a bit more surgery on the ebuilds. It allows to use some samba4 bits - getting all that working will be fun, but also takes time. And as always, "patches welcome" :)
I believe samba is up to 3.4.2 and I think it's important to get these 3.4 ebuilds out because there are major problems with connections to Windows 7 machines which is what everyone will be buying in a couple of weeks (LOL Yeah Right!!! Just kidding). No, but in all seriousness, I believe that the 3.4 series may solve some of the problems I am experiencing with samba and sharing between Windows 7 and gentoo.
Created attachment 206351 [details] ebuild for samba 3.4.2 (libs, client and server) Here are my samba 3.4.2 ebuilds, based on samba 3.3.8 in portage. The default "samba 3" compile was not very hard, but I also added a use flag (samba4) to compile the hybrid build. -> http://wiki.samba.org/index.php/Franky If you want to try this feature you'll have to set use flags to "samba4 ads". With this use flags you must use heimdal as your kerberos provider. -> http://k5wiki.kerberos.org/wiki/Projects/Samba4_Port#Samba.27s_use_of_Heimdal_symbols.2C_with_MIT_differences I had to write/apply some patches to get this working, it does compile nicely now. It took quite some time to figure it all out. But I don't yet know what this hybrid is actually capable of, will now investigate that. There isn't much documentation around. Hope it's usefull.
Created attachment 206353 [details] Registry tweaks for Windows 7 to join samba Domain You may find this registry file handy. Apply this if you get an error message when joining samba domains: "The specified domain either does not exist or could not be contacted" See also http://wiki.samba.org/index.php/Windows7
Created attachment 206396 [details] ebuild for samba 3.4.2 (libs, client and server) Cleaned up a little bit, optimized some use flag dependencies, changed some configuration options and added a possibility to use standalone libraries for: - tdb -> http://tdb.samba.org/ - talloc -> http://talloc.samba.org/ I added a virtual class for tdb and talloc (I know this might never get into portage). The idea is that ebuilds who need tdb should depend on virtual/tdb. You then can either use the default library from samba-libs (tdb/talloc use flag) or install the standalone package (gives better control over the installed version). Ebuilds for those libs are included and should compile fine (sys-libs/tdb and sys-libs/talloc). I checked that the resulting binaries are linked against the shared libs. You must disable the corresponding use flag for samba-libs, otherwise you'll get file collisions: # emerge -a sys-lib/tdb sys-lib/talloc # USE="-tdb -talloc" emerge -a net-fs/samba Not sure if this is the best way to do it, but IMO it's quite flexible? I also added use flags for all samba-libs (+talloc +tdb +netapi smbclient smbsharemodes addns). I'm not sure where addns, smbclient and smbsharemodes are needed (samba-server and samba-client compile fine without). I also don't see that any of these libs get linked against any binary. They seem optional for third-party software? Does anybody of you know how to check, if any other package that provides virtual/tdb, beside the current, is already installed (to disable the tdb use flag on samba-libs)? I.e. if sys-libs/tdb was installed, samba-libs should disable the tdb use flag for itself (so the user doesn't need to disable it explicitly to avoid file collisions). Suggestions and feedback is welcome! Hope it was worth the effort!
Nice work, Marcel! > You must disable the corresponding use flag for > samba-libs, otherwise you'll get file collisions: > Does anybody of you know how to check, if any other package that provides > virtual/tdb, beside the current, is already installed (to disable the tdb use > flag on samba-libs)? I.e. if sys-libs/tdb was installed, samba-libs should > disable the tdb use flag for itself (so the user doesn't need to disable it > explicitly to avoid file collisions). Yes, portage does that automatically for every ebuild that has PROVIDE="virtual/XY" Thus, all that's missing is: PROVIDE="talloc? ( virtual/talloc ) tdb? ( virtual/tdb )" after IUSE in the samba-libs ebuild. HTH Torsten
Created attachment 206524 [details] ebuild for samba 3.4.2 (libs, client and server) > PROVIDE="talloc? ( virtual/talloc ) > tdb? ( virtual/tdb )" Thanks, that part somehow got lost. Although it's not quite what I tried to accomplish. Anyway, I don't think it would have made much sense. I have now added some virtual ebuilds (new-style) and blocks for the tdb/talloc ebuilds and samba-libs[tdb,talloc]. Seems to work quite well. Added tdb/ldb-cmd-line tools to samba-libs (tools use flag) and tried to include all use-flag specific dependencies for samba-libs. But there might be missing some (I tested some combinations). Also fixed some QA issues (mostly to do with not repected LDFLAGS). Have a nice weekend, Marcel
Sooo. 3.4.2 is in the tree. Big thanks to Marcel, but please don't mutilate the ebuilds like that next time. No need to break the header etc. etc. (but mostly cosmetics, good work!) Please file a new bug for all remaining issues, this bug is way past its expiration date and totally confusing by now. Thanks for your patches and testing, and keep up the good work!
I don't understand why add the virtual/tdb and virtual/talloc? Why not always use the standalone packages? Not that you have a real selection here... Either it comes within the samba-libs sources or as a standalone. As far as I know Gentoo approach was always use the standalone libraries if possible. Virtual is for real choice... Two different implementation. Anyone?
> I don't understand why add the virtual/tdb and virtual/talloc? > Why not always use the standalone packages? I was wondering the same thing.
