Andrew Bartlett [Mon, 23 Apr 2012 01:37:39 +0000 (11:37 +1000)]
build:ignore solaris _GLOBAL_OFFSET_TABLE_ in duplicate symbol checker
Alejandro Escanero Blanco [Wed, 9 May 2012 09:35:51 +0000 (11:35 +0200)]
s3:auth/server_info: the primary rid should be in the groups rid array (bug #8798)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed May 9 19:36:01 CEST 2012 on sn-devel-104
Günther Deschner [Wed, 9 May 2012 13:33:04 +0000 (15:33 +0200)]
allow to use system iniparser library.
Guenther
Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed May 9 17:38:33 CEST 2012 on sn-devel-104
Günther Deschner [Tue, 8 May 2012 12:45:02 +0000 (14:45 +0200)]
waf: remove pointless WINBIND_KRB5_LOCATOR env.
Guenther
Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed May 9 15:16:34 CEST 2012 on sn-devel-104
Andrew Bartlett [Wed, 9 May 2012 04:35:55 +0000 (14:35 +1000)]
s3-smbd: Fix the creation of duplicate SMB_ACL_GROUP entries
The issue was a simple copy and paste bug, which casued a duplicate SMB_ACL_GROUP
to be added when we already had one.
Andrew Bartlett
Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed May 9 13:17:29 CEST 2012 on sn-devel-104
Andreas Schneider [Mon, 7 May 2012 07:36:35 +0000 (09:36 +0200)]
s3-spoolss: Set DWORD values correctly.
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Wed May 9 11:13:00 CEST 2012 on sn-devel-104
Andrew Bartlett [Tue, 8 May 2012 13:39:35 +0000 (23:39 +1000)]
s3-lib/sysacls: Do not include an embedded \0 between ACL entries in sys_acl_to_text()
This makes it possible to print the entire string again.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May 9 06:07:06 CEST 2012 on sn-devel-104
Andrew Bartlett [Tue, 8 May 2012 04:11:27 +0000 (14:11 +1000)]
s3-lib: Add const to sys_acl_to_text
Andrew Bartlett [Tue, 8 May 2012 04:02:27 +0000 (14:02 +1000)]
s3-vfs: Show the invalid ACL when we say it is invalid for set
Andrew Bartlett [Tue, 8 May 2012 04:02:07 +0000 (14:02 +1000)]
s3-lib: Fix indentation in sys_acl_to_text()
Stefan Metzmacher [Mon, 7 May 2012 15:01:08 +0000 (17:01 +0200)]
Revert "selftest: mark ^samba4.raw.context.session1 as flapping, the test was wrong"
This reverts commit
794a9da38fbd88eb3d358d453cc5d21998604caa.
The test is fixed now.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed May 9 02:53:24 CEST 2012 on sn-devel-104
Stefan Metzmacher [Sun, 6 May 2012 19:09:47 +0000 (21:09 +0200)]
s4:smb_server/smb: only create a new session with vuid == 0
metze
Stefan Metzmacher [Tue, 1 May 2012 11:33:14 +0000 (13:33 +0200)]
s4:torture/raw/context: test a session setup with a given invalid vuid
On a session setup with EXTENDED_SECURITY we'll get ERRSRV:ERRbaduid,
while a session setup without EXTENDED_SECURITY ignores the given vuid.
Before this test was doing a reauth of a given vuid, which works for newer
Windows versions, but Windows 2000 gives INVALID_PARAMETER.
metze
Stefan Metzmacher [Mon, 7 May 2012 10:32:28 +0000 (12:32 +0200)]
selftest: mark ^samba4.raw.context.session1 as flapping, the test was wrong
metze
Stefan Metzmacher [Mon, 7 May 2012 10:33:45 +0000 (12:33 +0200)]
s3:libsmb: remove unused var in smb2cli_set_info_done
Christian Ambach [Tue, 8 May 2012 15:16:49 +0000 (17:16 +0200)]
s3:winbindd:autorid check that transaction start did work
this fixes Coverity #700172 CHECKED_RETURN
Autobuild-User: Christian Ambach <ambi@samba.org>
Autobuild-Date: Wed May 9 00:27:08 CEST 2012 on sn-devel-104
Christian Ambach [Tue, 8 May 2012 14:03:13 +0000 (16:03 +0200)]
s3:smbd fix some compiler warnings
Alexander Werth [Fri, 20 Jan 2012 18:17:21 +0000 (19:17 +0100)]
s3:vfs/gpfs: Have inherited deny ACE's show up in ACLs
Don't use the mode for the get_acl call that surpresses
inherited deny ACE's. This is now possible since
the inherited ACE flag exists now in GPFS and Samba.
Michael Adam [Tue, 8 May 2012 14:46:03 +0000 (16:46 +0200)]
s4:libcli:raw: fix a comment typo in smb_setfileinfo()
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue May 8 20:45:16 CEST 2012 on sn-devel-104
Michael Adam [Tue, 8 May 2012 14:45:10 +0000 (16:45 +0200)]
s4:torture: add a new smb2.session.reauth5 test: rename after reauth to anon - fails
Michael Adam [Tue, 8 May 2012 14:44:06 +0000 (16:44 +0200)]
s4:torture: add a new smb2.session.reauth4 test: setting security descriptor after reauth to anon - works
Karolin Seeger [Tue, 8 May 2012 14:33:07 +0000 (16:33 +0200)]
s3-docs: Fix bug #7930.
Add hint that setting "profile acls = yes" on normal shares can cause trouble.
Karolin
Autobuild-User: Karolin Seeger <kseeger@samba.org>
Autobuild-Date: Tue May 8 18:47:59 CEST 2012 on sn-devel-104
Karolin Seeger [Tue, 8 May 2012 14:03:18 +0000 (16:03 +0200)]
s3-po: Fix typo in comment.
Karolin
Karolin Seeger [Tue, 8 May 2012 14:01:14 +0000 (16:01 +0200)]
s3-net: Fix typo in comment.
Karolin
Kai Blin [Wed, 28 Mar 2012 10:19:51 +0000 (12:19 +0200)]
s4 dns: unify error handling when bailing out
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue May 8 15:48:25 CEST 2012 on sn-devel-104
Kai Blin [Tue, 13 Mar 2012 07:04:14 +0000 (08:04 +0100)]
s4 dns: Add TSIG and TKEY records to idl
Karolin Seeger [Tue, 8 May 2012 10:01:28 +0000 (12:01 +0200)]
s3-docs: Fix several typos.
Part of a fix for bug #7938. Based on a patch provided by John Bradshaw
<john@johnbradshaw.org>.
Karolin
Autobuild-User: Karolin Seeger <kseeger@samba.org>
Autobuild-Date: Tue May 8 13:56:32 CEST 2012 on sn-devel-104
Karolin Seeger [Tue, 8 May 2012 09:05:37 +0000 (11:05 +0200)]
s3-docs: overrided -> overridden
Fix typo. Part of a fix for bug #7938. Based on a patch provided by John
Bradshaw <john@johnbradshaw.org>.
Christian Ambach [Tue, 8 May 2012 07:15:12 +0000 (09:15 +0200)]
s3:vfs/shadow_copy2 fix some compiler warnings
about unused variables
Autobuild-User: Christian Ambach <ambi@samba.org>
Autobuild-Date: Tue May 8 11:15:07 CEST 2012 on sn-devel-104
Christian Ambach [Tue, 8 May 2012 07:11:36 +0000 (09:11 +0200)]
s3:vfs/shadow_copy2 make descending sort order the default
otherwise Explorer won't work correctly when trying to restore a folder
Christian Ambach [Mon, 7 May 2012 17:17:18 +0000 (19:17 +0200)]
docs:autorid document ignore builtin parameter
Christian Ambach [Mon, 7 May 2012 17:14:56 +0000 (19:14 +0200)]
s3:winbindd/autorid add ignore builtin parameter
BUILTIN should be handled by passdb, however if passdb does not know
about a SID, autorid creates a range for BUILTIN and does deterministic mapping
make it possible to turn off this behavior
Christian Ambach [Mon, 7 May 2012 17:02:23 +0000 (19:02 +0200)]
docs:autorid document read-only parameter
Christian Ambach [Mon, 7 May 2012 12:19:26 +0000 (14:19 +0200)]
s3:winbindd/autorid add support for read-only mode
make it possible to set read-only = yes for the backend
so users can replicate an autorid.tdb to another server
to use the same mappings without risking that updates
are done on both sides
Christian Ambach [Mon, 7 May 2012 17:08:10 +0000 (19:08 +0200)]
docs:autorid document how well-known SIDs will be mapped
they consume space of the allocation pool and a list of most known well-known SIDs is
preallocated to create a deterministic mapping
Christian Ambach [Fri, 4 May 2012 15:56:26 +0000 (17:56 +0200)]
s3:winbindd/autorid preallocate well-known SIDs
preallocate the list of well-known SIDs that Win2008R2 reports
to be groups and that are on the list in KB243330
This will allow for deterministic mapping of these SIDs, even if they
are stored in the allocation pool as this is the first thing that autorid
will allocate from the pool during module initialization
Andreas Schneider [Thu, 3 May 2012 15:10:27 +0000 (17:10 +0200)]
krb5samba: Add smb_krb5_make_pac_checksum.
Signed-off-by: Simo Sorce <idra@samba.org>
Autobuild-User: Simo Sorce <idra@samba.org>
Autobuild-Date: Tue May 8 08:30:52 CEST 2012 on sn-devel-104
Andreas Schneider [Thu, 3 May 2012 15:10:53 +0000 (17:10 +0200)]
s4-auth: Use smb_krb5_make_pac_checksum.
Signed-off-by: Simo Sorce <idra@samba.org>
Simo Sorce [Fri, 4 May 2012 15:02:48 +0000 (11:02 -0400)]
krb5samba: Add krb5_free_checksum_contents wrapper
Andrew Bartlett [Mon, 7 May 2012 09:21:10 +0000 (19:21 +1000)]
lib/util: Map 0x7fffffffffffffffLL as 0x7fffffffffffffffLL in time conversion
TIME_T_MAX is not actually INT64_MAX at the moment, so check both
values and set to the magic end-of-time value.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue May 8 06:41:43 CEST 2012 on sn-devel-104
Andrew Bartlett [Mon, 7 May 2012 07:06:23 +0000 (17:06 +1000)]
s4-provision Ensure we have posix ACLs before we permit a s3fs-based Samba4 to be configured
Andrew Bartlett [Mon, 7 May 2012 06:24:03 +0000 (16:24 +1000)]
s3-python: Add python bindings for posix ACL layer
This will allow us to check that posix ACLs work in the s4 provision, and avoid
--use-s3fs if they do not.
Andrew Bartlett
Stefan Metzmacher [Thu, 3 May 2012 12:41:21 +0000 (14:41 +0200)]
s4:torture/raw/context: add subtests as torture testcases
TODO: add test_session with 'use spnego = false'.
We need a way to do set an option just for one test case.
Note: the 'use spnego = false' was ignored before as it's
only used on the first session setup on a connection.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue May 8 04:50:39 CEST 2012 on sn-devel-104
Stefan Metzmacher [Tue, 1 May 2012 10:38:06 +0000 (12:38 +0200)]
s4:torture/raw/context: INVALID_PARAMETER vs. LOGON_FAILURE...
If the try a session setup without EXTENDED_SECURITY after
one with EXTENDED_SECURITY Windows 2008 R2 returns INVALID_PARAMETER,
while Windows 2000 sp4 returns LOGON_FAILURE...
metze
Stefan Metzmacher [Wed, 2 May 2012 11:46:34 +0000 (13:46 +0200)]
s4:torture/raw: make torture_raw_context a test suite
metze
Stefan Metzmacher [Tue, 1 May 2012 10:39:21 +0000 (12:39 +0200)]
s4:torture/raw/context: make use of torture_* macros and avoid 'printf'
metze
Stefan Metzmacher [Tue, 1 May 2012 10:35:28 +0000 (12:35 +0200)]
s4:torture/raw/context: pass tctx to test_pid_exit_only_sees_open()
metze
Stefan Metzmacher [Mon, 7 May 2012 09:50:59 +0000 (11:50 +0200)]
selftest: samba4 doesn't support reauth
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue May 8 02:43:49 CEST 2012 on sn-devel-104
Stefan Metzmacher [Mon, 7 May 2012 09:32:32 +0000 (11:32 +0200)]
s4:torture/raw/session: make sure we got a reauth of the existing session
metze
Stefan Metzmacher [Mon, 7 May 2012 10:07:30 +0000 (12:07 +0200)]
selftest: mark ^samba4.raw.session.reauth as flapping
Because the test is wrong...
metze
Andreas Schneider [Mon, 7 May 2012 09:57:34 +0000 (11:57 +0200)]
talloc: Update doxygen config.
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Mon May 7 21:13:15 CEST 2012 on sn-devel-104
Pavel Březina [Mon, 7 May 2012 10:30:44 +0000 (12:30 +0200)]
doc: Remove latex to doxygen conversion leftovers in talloc.
Signed-off-by: Andreas Schneider <asn@samba.org>
Andreas Schneider [Mon, 7 May 2012 09:56:39 +0000 (11:56 +0200)]
doc: Fixes for the talloc best practices tutorial.
Andreas Schneider [Mon, 7 May 2012 09:42:44 +0000 (11:42 +0200)]
doc: Fixes for the talloc debugging tutorial.
Andreas Schneider [Mon, 7 May 2012 09:36:37 +0000 (11:36 +0200)]
doc: Fixes for the talloc pool tutorial.
Andreas Schneider [Mon, 7 May 2012 09:30:06 +0000 (11:30 +0200)]
doc: Fixes for the talloc destructor tutorial.
Andreas Schneider [Mon, 7 May 2012 09:25:50 +0000 (11:25 +0200)]
doc: Fixes for the talloc dynamic type system tutorial.
Andreas Schneider [Mon, 7 May 2012 09:18:26 +0000 (11:18 +0200)]
doc: Fixes for the talloc stealing tutorial.
Andreas Schneider [Mon, 7 May 2012 09:09:56 +0000 (11:09 +0200)]
doc: Fixes for the talloc context tutorial.
Pavel Březina [Sun, 6 May 2012 12:34:48 +0000 (14:34 +0200)]
doc: Add talloc tutorial.
Signed-off-by: Andreas Schneider <asn@samba.org>
Jelmer Vernooij [Mon, 7 May 2012 14:43:17 +0000 (16:43 +0200)]
heimdal: Cope with newer Heimdal versions accepting a keyset argument to
hdb_enctype2key.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon May 7 18:33:10 CEST 2012 on sn-devel-104
Michael Adam [Mon, 7 May 2012 12:09:28 +0000 (14:09 +0200)]
s3:registry: let reg_values_need_update() return true if the backend does not implement the method
Otherwise the value cache might become outdated.
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Mon May 7 16:11:05 CEST 2012 on sn-devel-104
Michael Adam [Mon, 7 May 2012 12:08:13 +0000 (14:08 +0200)]
s3:registry: let reg_subkeys_need_update() return true if the backend does not implement the method
Otherwise the subkey cache might become outdated.
Amitay Isaacs [Mon, 7 May 2012 01:46:27 +0000 (11:46 +1000)]
s4-dns: Build BIND DLZ modules with correct private library
This fixes rpath for samdb-common private library after make install.
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Mon May 7 07:40:29 CEST 2012 on sn-devel-104
Stefan Metzmacher [Sat, 5 May 2012 07:31:39 +0000 (09:31 +0200)]
lib/param: add support for "SMB3_00"
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sun May 6 16:38:00 CEST 2012 on sn-devel-104
Stefan Metzmacher [Sat, 5 May 2012 07:35:17 +0000 (09:35 +0200)]
s3:smb2_negprot: add support for PROTOCOL_SMB3_00
metze
Stefan Metzmacher [Sat, 5 May 2012 07:55:59 +0000 (09:55 +0200)]
s4:libcli/smb2: use PROTOCOL_LATEST
metze
Stefan Metzmacher [Sat, 5 May 2012 07:42:28 +0000 (09:42 +0200)]
s3:torture/test_smb2: add support for PROTOCOL_SMB3_00
metze
Stefan Metzmacher [Sat, 5 May 2012 07:33:43 +0000 (09:33 +0200)]
libcli/smb/smbXcli: add support for PROTOCOL_SMB3_00
metze
Stefan Metzmacher [Sat, 5 May 2012 07:38:25 +0000 (09:38 +0200)]
libcli/smb: add #define PROTOCOL_LATEST PROTOCOL_SMB3_00
metze
Stefan Metzmacher [Sat, 5 May 2012 07:28:57 +0000 (09:28 +0200)]
libcli/smb: add PROTOCOL_SMB3_00
metze
Stefan Metzmacher [Sat, 5 May 2012 07:33:19 +0000 (09:33 +0200)]
libcli/smb: add SMB3_DIALECT_REVISION_300
metze
Stefan Metzmacher [Thu, 3 May 2012 10:07:11 +0000 (12:07 +0200)]
s3:torture: do some query_info and set_info calls in SMB2-SESSION-REAUTH
metze
Stefan Metzmacher [Thu, 3 May 2012 10:02:55 +0000 (12:02 +0200)]
s3:libsmb: add smb2cli_set_info*
metze
Stefan Metzmacher [Thu, 3 May 2012 07:10:53 +0000 (09:10 +0200)]
s3:libsmb: add smb2cli_query_info*
metze
Stefan Metzmacher [Thu, 3 May 2012 10:05:13 +0000 (12:05 +0200)]
s3:libsmb: use 'state' instead of 'talloc_tos()' in smb2cli_tcon*
metze
Stefan Metzmacher [Thu, 3 May 2012 10:05:13 +0000 (12:05 +0200)]
s3:libsmb: use 'state' instead of 'talloc_tos()' in smb2cli_ioctl*
metze
Stefan Metzmacher [Thu, 3 May 2012 10:05:13 +0000 (12:05 +0200)]
s3:libsmb: use 'state' instead of 'talloc_tos()' in smb2cli_create*
metze
Stefan Metzmacher [Thu, 3 May 2012 10:04:12 +0000 (12:04 +0200)]
s3:libsmb: remove unused reference to talloc_tos()
metze
Stefan Metzmacher [Thu, 3 May 2012 12:48:57 +0000 (14:48 +0200)]
s3:idmap_cache: change DEBUG message to level 10
metze
Andrew Bartlett [Sun, 6 May 2012 06:41:18 +0000 (16:41 +1000)]
s4-s3-upgrade: Max/min password age policy is in seconds, not days
This cases upgraded domains to have a too-long password expiry, which in extreme
cases can cause the KDC to misfunction.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Sun May 6 14:49:39 CEST 2012 on sn-devel-104
Matthieu Patou [Sun, 6 May 2012 00:03:37 +0000 (17:03 -0700)]
s4-schema: Validate more class attribute when adding a new class in the schema
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun May 6 04:17:56 CEST 2012 on sn-devel-104
Matthieu Patou [Mon, 16 Apr 2012 04:58:49 +0000 (21:58 -0700)]
s4: use intermediate var, increase lisibility
Matthieu Patou [Sun, 15 Apr 2012 21:02:41 +0000 (14:02 -0700)]
olschema2ldif: be more strict where checking for open/closed braces
Michael Adam [Sat, 5 May 2012 00:12:25 +0000 (02:12 +0200)]
s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend
It simply calls to the regdb functions.
This fixes a caching issue uncovered by recent changes.
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Sat May 5 04:10:43 CEST 2012 on sn-devel-104
Michael Adam [Fri, 4 May 2012 16:01:00 +0000 (18:01 +0200)]
s3:registry: return error when Key does not exist in regdb_fetch_values_internal()
Michael Adam [Fri, 4 May 2012 16:00:15 +0000 (18:00 +0200)]
s3:smbd: comment the lp_load call in reload_services()
Volker Lendecke [Fri, 4 May 2012 12:56:25 +0000 (14:56 +0200)]
s3: Use hex_encode_buf
Autobuild-User: Volker Lendecke <vl@samba.org>
Autobuild-Date: Fri May 4 20:32:37 CEST 2012 on sn-devel-104
Volker Lendecke [Fri, 4 May 2012 12:56:25 +0000 (14:56 +0200)]
s3: Use hex_encode_buf
Volker Lendecke [Fri, 4 May 2012 12:16:45 +0000 (14:16 +0200)]
s3: Remove an unused extern declaration
Volker Lendecke [Fri, 4 May 2012 12:07:13 +0000 (14:07 +0200)]
s3: Remove an unused parameter from check_parent_access()
Volker Lendecke [Fri, 4 May 2012 12:03:42 +0000 (14:03 +0200)]
s3: In mkdir_internal, don't retrieve parent_dir from check_parent_access
We have already created that ourselves a few lines above
Andreas Schneider [Thu, 3 May 2012 09:28:50 +0000 (11:28 +0200)]
waf: Fix com_err detection with MIT krb5.
Signed-off-by: Simo Sorce <idra@samba.org>
Autobuild-User: Simo Sorce <idra@samba.org>
Autobuild-Date: Fri May 4 18:43:05 CEST 2012 on sn-devel-104
Alexander Bokovoy [Thu, 3 May 2012 09:33:42 +0000 (12:33 +0300)]
s4:auth/kerberos: don't do tracing in MIT build
Signed-off-by: Simo Sorce <idra@samba.org>
Alexander Bokovoy [Wed, 2 May 2012 18:40:13 +0000 (21:40 +0300)]
s4:torture: auth/pac.c: use Kerberos wrapper for krb5_keyblock_init
Signed-off-by: Simo Sorce <idra@samba.org>
Alexander Bokovoy [Wed, 2 May 2012 18:16:01 +0000 (21:16 +0300)]
Avoid using Heimdal-specific tests in MIT build
Alexander Bokovoy [Wed, 2 May 2012 17:59:00 +0000 (20:59 +0300)]
s4:ntvfs: add missing headers to vfs_ipc
vfs_ipc.c had system/kerberos.h and system/filesys.h missing
Signed-off-by: Simo Sorce <idra@samba.org>
Simo Sorce [Wed, 2 May 2012 17:22:08 +0000 (13:22 -0400)]
Fix direct access to krb5_principal structure
Simo Sorce [Wed, 2 May 2012 16:24:34 +0000 (12:24 -0400)]
auth-session: MIT doesn't have import/export cred yet
For now let's just loose this functionality with the MIT build.
gss_import/export_cred should be availa ble when MIT 1.11 is released and this
code is used only in some proxy scenario. Not normally needed for common
configurations.
Andreas Schneider [Fri, 27 Apr 2012 18:29:47 +0000 (20:29 +0200)]
s4-auth: Use smb_krb5_cc_get_lifetime() wrapper.
Signed-off-by: Simo Sorce <idra@samba.org>
git.samba.org / sfrench / samba-autobuild / .git / log