Arvid Requate [Fri, 2 Mar 2012 12:59:30 +0000]
SEGV in acl_validate_spn_value: dnsHostName NULL
This patch addresses a segfault in acl_validate_spn_value which occurs
when the "dnsHostName" attribute is missing. This seems to be the case
in domains migrated with samba3upgrade. Looks similar to MS KB 817543.
Signed-off-by: Nadezhda Ivanova <nivanova@drizzit.(none)>
Andrew Bartlett [Fri, 2 Mar 2012 11:28:59 +0000]
selftest: Rework samba4.blackbox.bogusdomain to use a temporary user
This avoids leaving an account in the test environment after the test is run
and therefore avoids issues with interations with other tests.
Also, we now use the local administrator account in the member server to
add the test account.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Mar 2 14:44:36 CET 2012 on sn-devel-104
Andrew Bartlett [Fri, 2 Mar 2012 07:20:45 +0000]
selftest: close stdin and wait with waitpid() for a safer exit
This avoids timelimit sending kill -9 after 1 second, which may
disrupt the writing of gcov data.
Andrew Bartlett
Andrew Bartlett [Fri, 2 Mar 2012 07:01:13 +0000]
selftest: Put stdin pipe on the environment
This seems to help us close the right pipe at cleanup time.
Andrew Bartlett
Volker Lendecke [Fri, 2 Mar 2012 01:10:52 +0000]
s3: Test for statfs before statfs64
Autobuild-User: Volker Lendecke <vl@samba.org>
Autobuild-Date: Fri Mar 2 12:04:35 CET 2012 on sn-devel-104
Brad Smith [Fri, 2 Mar 2012 00:34:16 +0000]
s3: Further fix for bug 8777
Volker Lendecke [Thu, 1 Mar 2012 23:45:51 +0000]
s3: Enable statvfs usage on NetBSD
linux_statvfs is pretty much what you use when you have susv4.
No real code change, this moves linux_statvfs to the bottom of the
(LINUX) to #ifdef (STAT_STAVFS).
Amitay Isaacs [Fri, 2 Mar 2012 06:56:24 +0000]
s4-rpc: dnsserver: Fix the typo in comparing two DNS records
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Fri Mar 2 10:27:41 CET 2012 on sn-devel-104
Stefan Metzmacher [Mon, 27 Feb 2012 14:20:45 +0000]
s3:rpc_server: initialize struct schannel_state to zero
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Fri Mar 2 08:48:23 CET 2012 on sn-devel-104
Stefan Metzmacher [Mon, 27 Feb 2012 14:20:45 +0000]
s3:rpc_client: initialize struct schannel_state to zero
metze
Stefan Metzmacher [Mon, 27 Feb 2012 14:20:45 +0000]
s4:auth/gensec/schannel: initialize struct schannel_state to zero
metze
Stefan Metzmacher [Mon, 27 Feb 2012 14:18:56 +0000]
s4:auth/gensec/schannel: make a copy of netlogon_creds_CredentialState in the client
This is really a copy for the lifetime of the rpc connection.
metze
Andrew Bartlett [Thu, 1 Mar 2012 06:26:32 +0000]
s3-selftest: Add tests for ntlm_auth gss-spnego client and server
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Mar 2 07:05:44 CET 2012 on sn-devel-104
Andrew Bartlett [Fri, 2 Mar 2012 02:07:09 +0000]
s3-rpcclient: Ensure interfaces are loaded after smb.conf
This ensures that the interfaces line in the smb.conf is honoured.
Andrew Bartlett
Jelmer Vernooij [Fri, 2 Mar 2012 02:46:13 +0000]
pyldb: Fix some more long lines, fix formatting.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Fri Mar 2 05:26:56 CET 2012 on sn-devel-104
Jelmer Vernooij [Fri, 2 Mar 2012 02:30:51 +0000]
selftest: Move manual page into a separate file.
(Generated using pod2man from selftest.pl itself)
Andrew Bartlett [Fri, 2 Mar 2012 00:44:56 +0000]
selftest: Establish a registry of socket wrapper IPs
This fixes a bug where chgdcpass was on the same IP as localsubdc, and
will avoid similar mistakes in future.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Mar 2 03:48:05 CET 2012 on sn-devel-104
Andrew Bartlett [Thu, 1 Mar 2012 05:55:04 +0000]
s3-libsmb: Initialise ticket to ensure we do not invalid memory
The free is however a talloc_free(), which has additional protection against
freeing the wrong thing.
Andrew Bartlett
Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Mar 2 01:45:19 CET 2012 on sn-devel-104
Jeremy Allison [Thu, 1 Mar 2012 20:35:27 +0000]
Move to talloc from malloc.
Jeremy Allison [Thu, 1 Mar 2012 18:57:17 +0000]
Fix mixup between talloc/malloc.
Jelmer Vernooij [Thu, 1 Mar 2012 20:26:27 +0000]
pyldb: Avoid using PyErr_LDB_ERROR_IS_ERR_RAISE where PyErr_SetLdbError suffices.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Thu Mar 1 23:06:55 CET 2012 on sn-devel-104
Amitay Isaacs [Thu, 1 Mar 2012 13:23:00 +0000]
dlz_bind9: Match PTR records as DNS names and not just strings
This fixes the dynamic update of PTR records.
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Thu Mar 1 15:58:05 CET 2012 on sn-devel-104
Amitay Isaacs [Tue, 28 Feb 2012 06:01:27 +0000]
s4-dns: Fix handling of TXT DNS Record
Amitay Isaacs [Tue, 28 Feb 2012 07:27:04 +0000]
upgradedns: Fix import of TXT DNS records
Amitay Isaacs [Tue, 28 Feb 2012 05:35:39 +0000]
s4-rpc: dnsserver: Update data type for TXT DNS records
Amitay Isaacs [Tue, 28 Feb 2012 04:14:49 +0000]
samba-tool: dns: Add support for handling TXT records
Amitay Isaacs [Tue, 28 Feb 2012 04:12:44 +0000]
samba-tool: dns: Copy string data when creating DNS_RPC_RECORD
Amitay Isaacs [Tue, 28 Feb 2012 03:59:39 +0000]
provision: dns: TXT Records need a list of strings as input
Amitay Isaacs [Tue, 28 Feb 2012 03:57:23 +0000]
ndr: dnsserver: Add pull and push functions for DNS_RPC_RECORD_STRING
Amitay Isaacs [Tue, 28 Feb 2012 03:56:37 +0000]
idl: dnsserver: Add DNS_RPC_RECORD_STRING data type for TXT DNS record
Amitay Isaacs [Tue, 28 Feb 2012 03:14:07 +0000]
dlz_bind9: Fix handling of TXT records with multiple quoted strings
Amitay Isaacs [Tue, 28 Feb 2012 04:07:10 +0000]
ndr: Add NDR pull, push, print functions for dnsp_string_list
Amitay Isaacs [Tue, 28 Feb 2012 04:06:12 +0000]
idl: dnsp: Add dnsp_string_list data type for TXT DNS record
Amitay Isaacs [Tue, 28 Feb 2012 02:58:48 +0000]
ndr: Fix NDR push function for dnsp_string
Push the actual length of the string not including null-termination.
Amitay Isaacs [Tue, 28 Feb 2012 03:58:16 +0000]
ndr: Fix the error messages, add correct data type name
Amitay Isaacs [Mon, 27 Feb 2012 06:09:10 +0000]
dlz_bind9: This fixes the problem with adding/deleting rdataset
Fix commit
169db333033b72b6f9ac1e7b23f0f2c151218c1f. This change
allowed for LDB records without dnsRecord attribute to exist to
prevent large number of deleted records.
This change fixes the handling of missing dnsRecord attribute
and correctly deleting dnsRecord attribute.
Andrew Bartlett [Thu, 1 Mar 2012 10:04:19 +0000]
s4-libnet: Remove set but unused variables
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu Mar 1 13:40:12 CET 2012 on sn-devel-104
Andrew Bartlett [Thu, 1 Mar 2012 10:02:24 +0000]
s4-libnet: Move to talloc_get_type_abort()
The NULL pointer dereference from talloc_get_type() might be free, but the
information on the actual and expected types from talloc_get_type_abort()
is priceless! :-)
Andrew Bartlett
Matthias Dieter Wallnöfer [Sat, 25 Feb 2012 17:24:37 +0000]
s4:torture/smb2/ioctl.c - quiet format specifier warnings on 32 bit
Achieve this by using platform independent casts.
Andrew Bartlett [Thu, 1 Mar 2012 06:44:48 +0000]
s3-selftest: make ntlm_auth test more robust to bad input
If we do not know the helper protocol, make sure to error.
Andrew Bartlett
Andrew Bartlett [Thu, 1 Mar 2012 05:57:46 +0000]
s3-selftest: Add more tests for ntlm_auth
Andrew Bartlett [Thu, 1 Mar 2012 05:57:04 +0000]
s3-ntlm_auth fix up gss-spnego-client so as to work with gss-spnego
The SPNEGO code changed since this was last tested.
Andrew Bartlett
Andrew Bartlett [Sat, 25 Feb 2012 03:17:23 +0000]
s3-ntlm_auth: Wrap kerberos token in GSSAPI
While windows will accept this ticket without the wrapping, it is
nicer to follow the standard and wrap it up in GSSAPI.
This should allow the ntlm_auth gss-spnego-client to talk to
the ntlm_auth gss-spengo server.
Reported by Christof Schmitt <christof.schmitt@us.ibm.com>
Andrew Bartlett
Andrew Bartlett [Sat, 25 Feb 2012 03:15:17 +0000]
s3-ntlm_auth: Add --target-service and --target-hostname options
This will allow the gss-spnego-client protocol to work with modern
SPNEGO servers that do not send the principal in the mechListMIC.
Andrew Bartlett
Andrew Bartlett [Thu, 1 Mar 2012 01:57:12 +0000]
build: look for backtrace_symbols in libexec
Andrew Bartlett [Thu, 1 Mar 2012 07:13:28 +0000]
build: link heimdal krb5 against execinfo if found
This is for FreeBSD, where backtrace symbols are in execinfo
Amitay Isaacs [Thu, 1 Mar 2012 08:37:25 +0000]
s4-provision: Use "state directory" from lp, as it is always set
This fixes new provisions when --targetdir is not provided.
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Thu Mar 1 11:41:02 CET 2012 on sn-devel-104
Richard Sharpe [Thu, 1 Mar 2012 03:45:29 +0000]
Trivial Comment fix: Supply a missing word in a comment
Autobuild-User: Richard Sharpe <sharpe@samba.org>
Autobuild-Date: Thu Mar 1 06:55:44 CET 2012 on sn-devel-104
Volker Lendecke [Thu, 1 Mar 2012 01:58:28 +0000]
s3: Fix "make bin/smbtorture4" in the autoconf build
tdb2 support does not work with a system-supplied libtdb yet
Autobuild-User: Volker Lendecke <vl@samba.org>
Autobuild-Date: Thu Mar 1 05:23:57 CET 2012 on sn-devel-104
Volker Lendecke [Thu, 1 Mar 2012 01:56:10 +0000]
heimdal: Fix the build on FreeBSD
We don't have BACKTRACE_SYMBOLS by default
Jeremy Allison [Thu, 1 Mar 2012 00:05:50 +0000]
Add open_dir_with_privilege() to ensure we're opening the correct directory when doing backup requests.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Mar 1 03:50:40 CET 2012 on sn-devel-104
Jeremy Allison [Wed, 29 Feb 2012 20:15:12 +0000]
Implement FLAG_TRANS2_FIND_BACKUP_INTENT for trans2 with privileges.
Jeremy Allison [Wed, 29 Feb 2012 19:42:21 +0000]
Add accessor functions to set a bool "priv" on a directory handle. Not yet used, but will be part of FLAG_TRANS2_FIND_BACKUP_INTENT code.
Jeremy Allison [Thu, 1 Mar 2012 01:04:08 +0000]
Add the implementation of check_reduced_name_with_privilege(). Now to plumb into
SMB1 requests.
Jeremy Allison [Fri, 24 Feb 2012 22:12:05 +0000]
Add check_reduced_name_with_privilege(), filename_convert_with_privilege() (currently unimplemented) in order to prepare for adding SeBackup/SeRestore code to the main fileserver.
Not yet plumbed into the main SMB1/SMB2 code.
Andrew Bartlett [Wed, 29 Feb 2012 01:48:21 +0000]
selftest: add more tests for plugin_s4_dc
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed Feb 29 12:14:05 CET 2012 on sn-devel-104
Andrew Bartlett [Thu, 8 Sep 2011 23:03:23 +0000]
selftest: change plugin_dc to test using s3fs
Andrew Bartlett [Tue, 28 Feb 2012 23:06:31 +0000]
selftest: skip the troublesome samba4.rpc.unixinfo test
The issue here is that while the single rpc_server process is stuck in
an nss_winbind getpwuid() call, winbindd cannot contact netlogon to
make the connection to the domain.
nss_winbind comes into play when (for s3fs) the
NSS_WRAPPER_WINBIND_SO_PATH environment variable is set. In the
medium term, the unixinfo pipe should either be rewritten fully async
or removed.
Andrew Bartlett
Stefan Metzmacher [Fri, 24 Feb 2012 14:58:40 +0000]
s4:winbind: use ncalrpc for connections to ourself
That avoids recursion if "smbd" is used as file server.
metze
Andrew Bartlett [Wed, 29 Feb 2012 01:48:21 +0000]
selftest: Do not run chgdcpass test on the main DC
If winbindd has it's password changed from under it, it becomes
grumpy.
Andrew Bartlett
Andrew Bartlett [Tue, 28 Feb 2012 23:37:40 +0000]
s4-winbindd: Do not ask for a tree that we will not use
Amitay Isaacs [Wed, 29 Feb 2012 05:05:53 +0000]
testsuite: Replace deprecated bzero with memset
This fixes build issues on solaris reported in bug #8767.
https://bugzilla.samba.org/show_bug.cgi?id=8767
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Wed Feb 29 10:39:10 CET 2012 on sn-devel-104
Michael Adam [Wed, 29 Feb 2012 04:49:49 +0000]
libcli/smb/smb2_signing: rename smb2_key_deviration -> smb2_key_derivation
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed Feb 29 09:01:54 CET 2012 on sn-devel-104
Stefan Metzmacher [Mon, 27 Feb 2012 12:27:38 +0000]
s3:torture/test_smb2: test path based calls during reauth in SMB2-MULTI-CHANNEL
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Feb 29 07:23:14 CET 2012 on sn-devel-104
Stefan Metzmacher [Mon, 27 Feb 2012 12:27:38 +0000]
s3:torture/test_smb2: test handle based calls during reauth in SMB2-MULTI-CHANNEL
metze
Stefan Metzmacher [Mon, 27 Feb 2012 10:19:22 +0000]
s3:torture/test_smb2: do a reauth over multiple channels in SMB2-MULTI-CHANNEL
metze
Stefan Metzmacher [Mon, 27 Feb 2012 10:50:40 +0000]
s3:torture/test_smb2: add a 3rd channel to SMB2-MULTI-CHANNEL
metze
Stefan Metzmacher [Wed, 29 Feb 2012 02:57:34 +0000]
s3:torture/test_smb2: expect FILE_CLOSED on invalid handles in SMB2-MULTI-CHANNEL
metze
Stefan Metzmacher [Wed, 29 Feb 2012 02:42:52 +0000]
s4:torture/smb2: remove unused var
metze
Stefan Metzmacher [Mon, 27 Feb 2012 08:33:46 +0000]
libcli/smb/smbXcli: use smb2_key_deviration() to setup SMB 2.24 keys
This uses the key diveration function from "NIST Special Publication 800-108"
in counter mode (section 5.1).
Thanks to Jeremy, Michael and Volker for the debugging!
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Feb 29 04:54:48 CET 2012 on sn-devel-104
Stefan Metzmacher [Mon, 27 Feb 2012 08:32:33 +0000]
libcli/smb/smb2_signing: implement aes_cmac_128 based signing for SMB 2.24
metze
Stefan Metzmacher [Wed, 22 Feb 2012 12:13:47 +0000]
libcli/smb/smb2_signing: add smb2_key_deviration()
This implements a simplified version of "NIST Special Publication 800-108" section 5.1
using hmac-sha256.
Thanks to Jeremy, Michael and Volker for the debugging!
metze
Stefan Metzmacher [Wed, 29 Feb 2012 00:39:31 +0000]
lib/crypto: add aes_cmac_128_test.c as local.crypto.aes_cmac_128 test
metze
Stefan Metzmacher [Sat, 18 Feb 2012 10:47:31 +0000]
lib/crypto: add aes_cmac_128* (rfc 4493)
Thanks to Jeremy, Michael and Volker for the debugging!
metze
Volker Lendecke [Tue, 28 Feb 2012 01:47:46 +0000]
s3: Introduce "req" helper var in reply_lockingX_success
Autobuild-User: Volker Lendecke <vl@samba.org>
Autobuild-Date: Wed Feb 29 03:08:53 CET 2012 on sn-devel-104
Volker Lendecke [Tue, 28 Feb 2012 02:14:37 +0000]
s3: Fix a const warning
Volker Lendecke [Tue, 28 Feb 2012 19:28:55 +0000]
s3: Add a test that makes a chained open break an oplock
Autobuild-User: Volker Lendecke <vl@samba.org>
Autobuild-Date: Wed Feb 29 01:13:03 CET 2012 on sn-devel-104
Volker Lendecke [Tue, 28 Feb 2012 21:36:06 +0000]
s3: More fix for smbd -i
We need a full re-initialize, otherwise we don't re-init the USR1
signal handler
Jeremy Allison [Tue, 28 Feb 2012 17:47:50 +0000]
Fix problem reported by Tom Lee <tlee2951@gmail.com> - when calculating
the share security mask, take priviliges into account for the connecting
user.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Tue Feb 28 20:21:26 CET 2012 on sn-devel-104
Andrew Tridgell [Thu, 9 Feb 2012 03:33:09 +0000]
torture: added samba4-ntvfs target
this will be used for the samba4 server with the ntvfs backend
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Feb 28 13:34:44 CET 2012 on sn-devel-104
Andrew Tridgell [Thu, 9 Feb 2012 03:07:00 +0000]
s3fs: when samba is logging to stdout, ask smbd to also do so
this prevents make test getting spurious errors about opening log
files in the install prefix
Andrew Tridgell [Wed, 30 Nov 2011 03:08:28 +0000]
smbd: detect EOF on stdin in --foreground mode
if EOF is detected on stdin then exit
Andrew Tridgell [Tue, 3 Jan 2012 05:48:29 +0000]
selftest: added a pipe on stdin in s3 child processes
this adds a pipe for STDIN in smbd, nmbd and winbindd when run in
selftest. This allows those processes to detect when they should exit
by looking for EOF on stdin.
Andrew Tridgell [Mon, 2 May 2011 23:35:07 +0000]
s3fs: added file_server directory
this contains a file server backend that forks and starts smbd
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Andrew Bartlett [Tue, 6 Sep 2011 01:34:35 +0000]
s4-smb_server Remove inetd-mode samba3 hook
Amitay Isaacs [Tue, 28 Feb 2012 07:26:28 +0000]
upgradedns: Missing rename from upgradedns to samba_upgradedns
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Feb 28 10:06:03 CET 2012 on sn-devel-104
Michael Adam [Tue, 28 Feb 2012 04:33:23 +0000]
s4:torture:smb2:durable-open: fix a silly access-after-free panic
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue Feb 28 08:33:44 CET 2012 on sn-devel-104
Stefan Metzmacher [Tue, 28 Feb 2012 04:11:23 +0000]
s3:torture/test_smb2: test a tree_connect during reauth
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Feb 28 06:58:44 CET 2012 on sn-devel-104
Stefan Metzmacher [Tue, 28 Feb 2012 03:24:12 +0000]
s3:torture/test_smb2: check directory listing during reauth
metze
Michael Adam [Tue, 28 Feb 2012 00:44:10 +0000]
s4:selftest: skip smb2.session testsuite
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue Feb 28 03:19:52 CET 2012 on sn-devel-104
Michael Adam [Tue, 28 Feb 2012 00:27:59 +0000]
s4:selftest: remove old "samba4.smb2.persistent.handle1" from knownfail - test does not exist
Michael Adam [Sun, 26 Feb 2012 16:53:13 +0000]
s4:torture:smb2: add new "session" testsuite starting with a session.reconnect test
Michael Adam [Sun, 26 Feb 2012 01:36:13 +0000]
s4:torture:smb2: add durable_open.reopen2a - variant of reopen2 with session reconnect
Michael Adam [Sun, 26 Feb 2012 00:45:53 +0000]
s4:torture:smb2: add torture_smb2_connection_ext() that takes previous_session
Michael Adam [Sun, 26 Feb 2012 00:45:00 +0000]
s4:libcli:smb2: add a smb2_connect_ext variant of smb2_connect that takes a previous_session argument
Michael Adam [Sun, 26 Feb 2012 00:43:50 +0000]
s4:libcli:smb2: add a previous session argument to smb2_connect_send()
Michael Adam [Sun, 26 Feb 2012 00:36:51 +0000]
s4:torture:smb2: add previous_session argument to torture_smb2_session_setup()
To allow for doing a session reconnect
Michael Adam [Sat, 25 Feb 2012 21:32:03 +0000]
s4:libcli:smb2: add a previous session argument to smb2_session_setup_spnego()
So that we can do a session reconnect.
Michael Adam [Sun, 26 Feb 2012 16:35:28 +0000]
s3:libsmb:smb2: pass previous session ID to session setup, not previous session
We only need the session, and under some circumstances, it might complicate
things for the caller to have to cope with the whole structure (talloc...).
Matthieu Patou [Sat, 25 Feb 2012 00:13:10 +0000]
s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path
If not the child process would hang for quite a long time up to the
moment when the connection is cleaned by the kernel (took ~ 20 minutes)
in my tests.
Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Mon Feb 27 23:10:03 CET 2012 on sn-devel-104
gitweb.samba.org / nivanova/samba-autobuild/.git / log