a cosmological pedestrian
Development / Linux / Samba
The git versioning system has two really nice features you might already heard about. One of them is git-worktree and the other are bare git repositories. This makes my life a lot easier working on Samba as often I have several feature branches I’m working on. Some features often take several months to finish. I don’t want to compile them again and again every time...
To the newcomer, Samba’s command line user interface appears to be a haphazard jumble of scripts and binaries with options and design principles that fade in and out of use according to some esoteric pattern. Douglas Bagnall The initial quote is from the SambaXP talk What should we do with our user interface? in 2019. Douglas wrote that nobody can fix it as experts are...
Development / Linux / Samba / Uncategorized
A new version of socket_wrapper has just been released. In short, socket_wrapper is a library passing all socket communications through unix sockets. It aims to help client/server software development teams willing to gain full functional test coverage. It makes possible to run several instances of the full software stack on the same machine and perform locally functional testing of complex network configurations. New in version...
TL;DR SMB3 file transfer with encryption will be 4-6 times faster with Samba 4.12 Samba is getting out of the crypto business GnuTLS >= 3.4.7 required FIPS compliance ahead Introduction More or less since the beginning of Samba, it implemented the cryptography it needed to talk to Windows on its own. One reason is that Windows didn’t follow the standards or used ciphers nobody else...
Enterprise distributions like Red Hat or SUSE are required to ship with MIT Kerberos. The reason is that several institutions or governments have a hard requirement for a special Kerberos implementation. It is the reason why the distributions by these vendors (Fedora, RHEL, openSUSE, SLES) only package Samba FS and not the AD component. To get Samba AD into RHEL some day it was clear,...
Development / RedHat / Samba
TL;DR: Parse and print .cat files: dumpmscat Introduction Günther Deschner and myself are looking into the new Microsoft Printing Protocol [MS-PAR]. Printing always means you have to deal with drivers. Microsoft package-aware v3 print drivers and v4 print drivers contain Microsoft Catalog files. A Catalog file (.cat) is a digitally-signed file. To be more precise it is a PKCS7 certificate with embedded data. Before I...
Development / KDE / Linux / Samba
I’ve just released uid_wrapper-1.2.0, a testing tool to fake privilege separation! The new version correctly checks privileges when changing IDs and has a lot more tests! Learn more at https://cwrap.org.
In Samba I had a failing test suite. I have nss_wrapper compiled with debug messages turned on, so it showed me the following line: NWRAP_ERROR(23052) – nwrap_he_parse_line: 3 Invalid line[TDB]: ‘DB’ The file should parse a hosts file like /etc/hosts, but the debug line showed that it tried to parse a TDB (Trivial Database) file, Samba database backend. I’ve started to investigate it and wondered...
Development / Linux / RedHat / Samba
Today I’ve released a new version of uid_wrapper (1.1.0) with full threading support. Robin Hack a colleague of mine spent a lot of time improving the code and writing tests for it. It now survives funny things like forking in a thread. We also added two missing functions and fixed several bugs. uid_wrapper is a tool to help you writing tests for your application. If...
Development / KDE / Linux / Samba
I’ve released a new preloadable wrapper named resolv_wrapper which can be used for nameserver redirection or DNS response faking. It can be used in testing environment to route DNS queries to a real nameserver separate from resolv.conf or fake one with simple config file. We tested it on Linux, FreeBSD and Solaris. It should work on other UNIX flavors too. You can download resolv_wrapper here.
