Gerald (Jerry) Carter [Mon, 25 Aug 2008 21:08:28 +0000 (16:08 -0500)]
Add workaround for docs build and dependency on parameters.all.xml
Gerald (Jerry) Carter [Mon, 25 Aug 2008 21:07:08 +0000 (16:07 -0500)]
Updating release notes for 3.0.32.
Gerald (Jerry) Carter [Mon, 25 Aug 2008 21:05:12 +0000 (16:05 -0500)]
Set version to 3.0.32.
Jeremy Allison [Fri, 22 Aug 2008 20:54:22 +0000 (13:54 -0700)]
Don't re-initialize a token when we already have one. This fixes the build farm failures when winbindd connects as guest.
This one took a *lot* of tracking down :-).
Jeremy.
Gerald (Jerry) Carter [Wed, 20 Aug 2008 18:00:40 +0000 (13:00 -0500)]
nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENT
According to the GNU libc nss guide, we should always set
errno to ENOENT when returning NSS_UNAVAIL.
http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface
At least the MQ Series message queing service that runs
on WebSphere will fail if you return any other errno in this case.
(cherry picked from commit
ee26664602445fa7798e2061f6bcbef0756d6528)
Jeremy Allison [Wed, 20 Aug 2008 01:13:25 +0000 (18:13 -0700)]
Fix bug 5697 nmbd spins in reload_interfaces when only loopback exists.
Reported by Ted Percival <ted@midg3t.net>.
Jeremy.
Michael Adam [Mon, 4 Aug 2008 11:31:26 +0000 (13:31 +0200)]
net: Fix IPC connections with interactive password prompt.
This fixes a regression introduced with
52f916c6.
Some net subcommands didn't work when the username, but not the
corresponding password was given on the command line.
Karolin Seeger [Tue, 29 Jul 2008 10:03:08 +0000 (12:03 +0200)]
man pages: Fix typos in man smbclient.
Karolin
(cherry picked from commit
db843d2faafb3487e3c7df4a3a52d6c71f369e1d)
(cherry picked from commit
3a3640a85daa1a85415c949f9c2b804b4f067dd7)
Jeremy Allison [Fri, 25 Jul 2008 18:46:34 +0000 (11:46 -0700)]
Back-port of Volkers fix.
Fix a race condition in winbind leading to a crash
When SIGCHLD handling is delayed for some reason, sending a request to a child
can fail early because the child has died already. In this case
async_main_request_sent() directly called the continuation function without
properly removing the malfunctioning child process and the requests in the
queue. The next request would then crash in the DLIST_ADD_END() in
async_request() because the request pending for the child had been
talloc_free()'ed and yet still was referenced in the list.
This one is *old*...
Volker
Jeremy.
Karolin Seeger [Tue, 22 Jul 2008 09:27:16 +0000 (11:27 +0200)]
man pages: "printcap name" is a global parameter, not a share specific one.
Karolin
(cherry picked from commit
9cde2525560536e16e2dbf991dbeb446260dd0df)
(cherry picked from commit
76061eee93fd67b96916a088c64a038e47a48814)
(cherry picked from commit
32dab019adaa3a0999af7baf6bcb8b2865e386c3)
Alexander Bokovoy [Sat, 19 Jul 2008 20:11:50 +0000 (00:11 +0400)]
Fix link for Using Samba
Jim McDonough [Thu, 17 Jul 2008 19:54:13 +0000 (15:54 -0400)]
In the "log file = " case, don't overwrite the
log.wb-<domain> logfile name on smb.conf reload.
Bo Yang [Wed, 16 Jul 2008 15:11:55 +0000 (11:11 -0400)]
Allow %u parameters for print job username - use advanced sub
Christoph Zauner [Fri, 11 Jul 2008 13:50:25 +0000 (15:50 +0200)]
man pages: Fix typos and add improvements.
(cherry picked from commit
060ff6d8d4e61f3ce89f980182413852cc5719be)
(cherry picked from commit
dab5cf616ce044040dd598fec3da9d3c97e51f6d)
(cherry picked from commit
253405062237edfa78dc669a275af7ce9db849c4)
Michael Adam [Thu, 10 Jul 2008 21:49:58 +0000 (23:49 +0200)]
docs: fix the specified default of "password server" - it is *, not "".
Michael
(cherry picked from commit
d7f759d302612ef9eb0bba022f3b3e1dd433f843)
Gerald W. Carter [Thu, 10 Jul 2008 19:17:14 +0000 (14:17 -0500)]
Updating release notes for 3.0.31
Jeremy Allison [Thu, 10 Jul 2008 17:05:00 +0000 (10:05 -0700)]
Fix from Volker. Fix a segfault in base64_encode_data_blob
We did not allocate enough memory for the \0 and a = at the end.
Jeremy.
Gerald W. Carter [Thu, 10 Jul 2008 16:57:09 +0000 (11:57 -0500)]
Setting version to 3.0.31
Karolin Seeger [Thu, 10 Jul 2008 09:23:59 +0000 (11:23 +0200)]
man pages: Add missing whitespace.
Karolin
(cherry picked from commit
5ba418d8bd7bd9a678853b23b0928da4f8693bcf)
(cherry picked from commit
5e220de387abc34926fd7a2be03fc4e4f35f0f7f)
(cherry picked from commit
9a4a8cc875eeccc4b8a23117724073f6b5581f4c)
Michael Adam [Wed, 9 Jul 2008 11:02:54 +0000 (13:02 +0200)]
Revert "tdbtool: fix off-by-one error in argument length. (bug #2344)"
This reverts commit
dd781951fb9acc556f1bd6760b72151a7c359a9f.
This fix is not valid:
1. convert_string() is not only used for key strings but also for data.
2. Some databases use string_tdb_data() i.e. non-null-terminated strings
as keynames and others (like the one I was using), use
string_term_tdb_data(), i.e. zero-terminated key strings.
After discussion with Metze, the easiest (and proper way) to
handle this is to specify key names as "keyname\0" for databases
which use string_term_tdb_data().
Sorry for the noise...
Michael
Michael Adam [Tue, 8 Jul 2008 14:13:24 +0000 (16:13 +0200)]
tdbtool: fix off-by-one error in argument length. (bug #2344)
This prevented all commands operating on keys (all non-traverse commands)
in tdbtool to fail with a "fetch failed" or "delete failed" message.
It seems that it fixes bug #2344 ...
Apparently this bug was introduced with
94e53472666ed in 2005.
Either nobody is using tdbtool or else tdb_find() has become
more strict about the key legth in the meantime. :-)
Michael
Jeremy Allison [Mon, 7 Jul 2008 18:18:30 +0000 (11:18 -0700)]
Allow authentication and memory credential refresh after password change from gdm/xdm. Patch from boyang <boyang@novell.com>.
Jeremy.
Jeremy Allison [Thu, 3 Jul 2008 17:28:36 +0000 (10:28 -0700)]
Patch from SATOH Fumiyasu <fumiyas@osstech.co.jp> for bug #5202. Re-activate "acl group control"
parameter and make it only apply to owning group. Also added man page fix.
Jeremy.
Jeremy Allison [Wed, 2 Jul 2008 23:10:50 +0000 (16:10 -0700)]
Canonicalize servername in the printer functions to remove leading '\\' characters. Ensure we always return consistent names.
Jeremy.
Jeremy Allison [Wed, 2 Jul 2008 18:58:07 +0000 (11:58 -0700)]
Fix bug #5578, reported by sendel2000@hotbox.ru. Bad (non-Samba) use of strlcat gives error.
Jeremy.
Jeremy Allison [Wed, 2 Jul 2008 17:50:50 +0000 (10:50 -0700)]
Ensure consistent use of pdb_get_nt_passwd instead of pdb_get_lanman_passwd.
Reported by hongbing Zhang <hongbing.zhang@gmail.com>.
Jeremy.
Jeremy Allison [Mon, 30 Jun 2008 16:16:15 +0000 (09:16 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
Gerald W. Carter [Sat, 28 Jun 2008 13:35:07 +0000 (09:35 -0400)]
Return NULL in sitename_fetch() if gencache_init() fails. Not false
(cherry picked from commit
9e9bab2dd859c7bb8082b4c932f1a95adf1895c6)
Jeremy Allison [Fri, 27 Jun 2008 22:30:52 +0000 (15:30 -0700)]
Fix usage message for net rpc trustdom add.
Jeremy.
Jeremy Allison [Fri, 27 Jun 2008 04:16:43 +0000 (21:16 -0700)]
Fix gcc -O3 warnings.
Jeremy.
Jeremy Allison [Thu, 26 Jun 2008 19:56:26 +0000 (12:56 -0700)]
Fix "variable might be used uninitialized" message.
Jeremy.
Jeremy Allison [Wed, 25 Jun 2008 22:09:42 +0000 (15:09 -0700)]
Part of fix for #5551. Split out the group enumeration functions to a BUILTIN and a Domain
specific version. Stops the domain groups appearing twice.
Jeremy.
Jeremy Allison [Wed, 25 Jun 2008 21:57:46 +0000 (14:57 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
Jeremy Allison [Wed, 25 Jun 2008 19:43:18 +0000 (12:43 -0700)]
Final (hopefully :-) part of fix for bug #5551. Allow passdb backend to enumerate domain groups.
Jeremy.
Jeremy Allison [Wed, 25 Jun 2008 01:02:46 +0000 (18:02 -0700)]
Fix for bug #5551, smbd recursing back into winbindd from a winbindd call.
Jeremy.
Jeremy Allison [Tue, 24 Jun 2008 23:41:18 +0000 (16:41 -0700)]
Fix bug #5555. Don't return NT_STATUS_PASSWORD_MUST_CHANGE error on machine account logon.
Jeremy.
Jeremy Allison [Tue, 24 Jun 2008 01:57:00 +0000 (18:57 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
Karolin Seeger [Mon, 23 Jun 2008 08:15:53 +0000 (10:15 +0200)]
Samba3 HOWTO: Remove trailing whitespaces.
Karolin
(cherry picked from commit
c7a9c903acbba9c70211e6f3c25964533bbc1622)
(cherry picked from commit
62e485eebd8a40b5692caa79bb3ed6108f0b835b)
Karolin Seeger [Mon, 23 Jun 2008 08:28:09 +0000 (10:28 +0200)]
man pages: Correct version in man winbindd again.
Karolin
(cherry picked from commit
ef44968276bfde2fdd3370e2558fb469357414be)
(cherry picked from commit
9fd1d784cf6044c5c03cf7ab0f2373e08df64295)
John H Terpstra [Wed, 28 May 2008 16:02:26 +0000 (11:02 -0500)]
Fixed publishing date info.
(cherry picked from commit
b96c9d54cfd29ec87d59655839a4136977a98032)
(cherry picked from commit
e4d03d3aede0cd611283a041eafdcd1e836aad33)
John H Terpstra [Wed, 28 May 2008 16:00:49 +0000 (11:00 -0500)]
Added TDB File documentation requested by some users.
(cherry picked from commit
5035311af639336fdc51fa9829e984ff281216f9)
(cherry picked from commit
a7531f4964ac8f861a41e9fa446e5a3aa69eaaa2)
John H Terpstra [Mon, 19 May 2008 18:02:08 +0000 (13:02 -0500)]
Clarification that hosts resolution is done by winbind only on IRIX, all other systems use libnss_wins.so.
(cherry picked from commit
3a8ea6be389bedbcdb5668664d862768c026f669)
(cherry picked from commit
8522db2075f8c9e869c6224f2852ce355bba987d)
Jeremy Allison [Sun, 22 Jun 2008 01:37:22 +0000 (18:37 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
Jeremy Allison [Fri, 20 Jun 2008 20:23:31 +0000 (13:23 -0700)]
Fix bug #5531 - fix conversion of ns units when converting from nttime to timespec.
Fix from hkurma@datadomain.com.
Jeremy.
Jeremy Allison [Fri, 20 Jun 2008 19:50:02 +0000 (12:50 -0700)]
Fix bug #5533. Winbindd fails to cope correctly with a workgroup name containing a '.'.
Jeremy.
John H Terpstra [Thu, 19 Jun 2008 21:11:10 +0000 (16:11 -0500)]
Fixing net help info.
John H Terpstra [Thu, 19 Jun 2008 16:11:59 +0000 (11:11 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Herb Lewis [Wed, 18 Jun 2008 21:29:17 +0000 (14:29 -0700)]
ENODATA is not defined in freeBSD 4.6.2
Karolin Seeger [Tue, 17 Jun 2008 11:18:17 +0000 (13:18 +0200)]
man pages: Move 'smbsh' man page to the examples directory.
smbsh.c is located in the examples directory. It does not make sense
to install a man page without installing the tool itself.
This fixes bug #4724.
Karolin
(cherry picked from commit
797ed744b15c94fa4831d9796b40bb0ab5df55b7)
(cherry picked from commit
23981be7a009dc9e056ba2e12c5df6e3a13ab193)
John H Terpstra [Fri, 13 Jun 2008 20:51:05 +0000 (15:51 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Jeremy Allison [Fri, 13 Jun 2008 16:43:34 +0000 (09:43 -0700)]
We should use set_domain_offline(domain) function instead of just set staus to offline. Otherwise,
domain will never goes online again.
From Bo Yang <boyang@novell.com>
Jeremy.
Volker Lendecke [Thu, 12 Jun 2008 11:25:53 +0000 (13:25 +0200)]
AIX build fix from William Jojo -- thanks
Volker Lendecke [Thu, 12 Jun 2008 10:35:28 +0000 (12:35 +0200)]
Add -brtl to the AIX linker flags, use bexpfull instead of bexpall
Thanks to William Jojo
John H Terpstra [Wed, 11 Jun 2008 15:36:27 +0000 (10:36 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Günther Deschner [Wed, 11 Jun 2008 07:52:56 +0000 (09:52 +0200)]
pam_winbind: Update cached creds during password change.
Fix is from Bo Yang @ Novell.
Thanks!
John H Terpstra [Tue, 10 Jun 2008 18:31:57 +0000 (13:31 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Karolin Seeger [Tue, 10 Jun 2008 13:30:19 +0000 (15:30 +0200)]
man pages: Don't refer to numbered chapter of the HOWTO collection.
This fixes bug #5527.
Thanks to the Debian package maintainers for reporting!
Karolin
(cherry picked from commit
b6696f4fbfc6aaffceef71c6099b8eaea58c1172)
Karolin Seeger [Tue, 10 Jun 2008 08:54:21 +0000 (10:54 +0200)]
man pages: Fix broken smb.conf section about the 'get quota command'.
This fixes bug #5422.
Thanks to the Debian package maintainers for reporting!
Karolin
(cherry picked from commit
04e2470e2eeef34362f2893ec062ae16f74c28ed)
John H Terpstra [Tue, 10 Jun 2008 03:46:49 +0000 (22:46 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Jim McDonough [Mon, 9 Jun 2008 15:36:39 +0000 (11:36 -0400)]
Don't reset password last set time just because the expired flag
is set to 0. If the account wasn't expired but autolocked,
using "net user /dom <username> /active:y" would clear this,
incorrectly setting the current time as the new "password last set"
time.
Karolin Seeger [Mon, 9 Jun 2008 13:05:26 +0000 (15:05 +0200)]
man pages: Fix synonyms.
Karolin
(cherry picked from commit
d1ae27ddbe9c30996d2c593a37e65581c3ff482c)
Jeremy Allison [Sun, 8 Jun 2008 21:17:47 +0000 (14:17 -0700)]
Bugfix noticed by Herb. On using the again: tag as a
goto target we were not reinitializing the array counts.
From Herb:
This is in the file nsswitch/winbindd_cm.c (samba-3.0.30) line 1236
We have a label again: where we keep trying to find the name of the DC
from the list of IPs returned by get_dcs. If we fail to figure out the
name we do a goto again at the end of the function. The problem is we
don't reset the num_dcs, num_addrs, etc and free the memory in the
various arrays. This seems wrong to me. I have a winbindd core where
I have 9 IPs returned for the DCs but at the time of the crash num_dcs
is 87 and if I look through the array dcs it keeps repeating entries
from the same group of 9
Jerry, Volker and Guenther please check.
Jeremy.
Jeremy Allison [Fri, 6 Jun 2008 22:02:56 +0000 (15:02 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
John H Terpstra [Fri, 6 Jun 2008 19:13:38 +0000 (14:13 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Günther Deschner [Fri, 6 Jun 2008 13:59:52 +0000 (15:59 +0200)]
pam_winbind: fix pam_sm_chauthtok for storing modified cached creds.
Thanks to Bo Yang for pointing this out.
Guenther
Jeremy Allison [Thu, 5 Jun 2008 21:34:35 +0000 (14:34 -0700)]
More correct fix (hopefully :-) for any memory leaks.
Jerry promised to check :-). Vl also please review.
Jeremy.
Günther Deschner [Thu, 5 Jun 2008 14:26:10 +0000 (16:26 +0200)]
net: fix joining w2k domains in "security = ads".
This repairs the join verification code which needs to try an anonymous
connection (as an authenticated connection will always fail with
NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT).
Guenther
John H Terpstra [Thu, 5 Jun 2008 15:54:32 +0000 (10:54 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Karolin Seeger [Thu, 5 Jun 2008 13:18:41 +0000 (15:18 +0200)]
Samba3-HOWTO: Add improvements/fixes.
These improvements/fixes were reported by
Pete Boyd <petes-bugs@thegoldenear.org> in bug #4203.
Karolin
(cherry picked from commit
497196e713b05901f02a46755bce6a63734dcf4c)
Günther Deschner [Wed, 4 Jun 2008 18:02:13 +0000 (20:02 +0200)]
net: for robustness reasons, fallback to level 24 pwd set while joining.
DCERPC_FAULT_INVALID_TAG is returned by older windows releases, in that case it
is wise to do what we did prior to 3.0.28.
Guenther
Jeremy Allison [Tue, 3 Jun 2008 19:17:34 +0000 (12:17 -0700)]
Fix by Bo Yang <boyang@novell.com> for bug with winbindd trusted domain chil
not keeping primary domain online status up to date.
Jeremy.
Karolin Seeger [Tue, 25 Mar 2008 11:00:42 +0000 (12:00 +0100)]
Fix usage message for 'net idmap dump'.
Karolin
(cherry picked from commit
c967b62dd3c924419fa4a72aa2143d6bef959d18)
Jeremy Allison [Tue, 3 Jun 2008 01:36:31 +0000 (18:36 -0700)]
Fix bug reported by David Eisner <deisner@gmail.com>. When allocating cli
buffers for large read/write - make sure we take account of the large
read/write SMB headers as well as the buffer space.
Jeremy.
Günther Deschner [Fri, 28 Mar 2008 23:47:42 +0000 (00:47 +0100)]
Don't let winbind getgroups crash when we have no gids in the token.
Guenther
Volker Lendecke [Mon, 2 Jun 2008 08:42:27 +0000 (10:42 +0200)]
Fix location of smbldap-tools
Thanks to Miguel Medalha <miguelmedalha@sapo.pt> for pointing this out
John H Terpstra [Sat, 31 May 2008 15:14:41 +0000 (10:14 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Alexander Bokovoy [Sat, 31 May 2008 07:07:44 +0000 (11:07 +0400)]
Fix use of smbconfoption in samba.entities.
During documentation migration to git my fixes to samba.entities got lost.
Update them now from latest working version (from samba-web).
Jeremy Allison [Sat, 31 May 2008 06:13:23 +0000 (23:13 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
Jeremy Allison [Sat, 31 May 2008 06:11:31 +0000 (23:11 -0700)]
Split the winbindd_passdb backend into a 'builtin' and a 'sam'
backend. This allows winbindd when running on a Samba PDC to
correctly answer wbinfo -u lists and other queries. I will
forward port this to 3.2 and 3.3 over the weekend. Passes
running under valgrind.
Jeremy.
Jeremy Allison [Sat, 31 May 2008 01:02:00 +0000 (18:02 -0700)]
minor memory leak fix from Chere Zhou <czhou@isilon.com>.
Jeremy.
Jeremy Allison [Sat, 31 May 2008 00:37:34 +0000 (17:37 -0700)]
Fix valgrind bug in debug statement. Don't reference uninitialized memory.
Jeremy.
Jeremy Allison [Sat, 31 May 2008 00:23:59 +0000 (17:23 -0700)]
Fix bug #5504. winbindd children and parent were handing SIGTERM in the same way - deleting the socket !
Jeremy.
Jeremy Allison [Fri, 30 May 2008 17:03:57 +0000 (10:03 -0700)]
From Michael R Sweet <mike@easysw.com>.
All,
Noticed that smbspool.c still has my Easy Software Products copyright
on it. The following patch fixes it to match the other code I've
contributed over the years...
Jeremy.
Günther Deschner [Fri, 30 May 2008 13:59:49 +0000 (15:59 +0200)]
Fix joining NT4 domains.
The negotiated netlogon flags also need to be returned in case we received
NT_STATUS_ACCESS_DENIED from a netauth2 request.
Guenther
John H Terpstra [Thu, 29 May 2008 20:45:58 +0000 (15:45 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Jeremy Allison [Thu, 29 May 2008 17:38:59 +0000 (10:38 -0700)]
Fix winbindd on a PDC by reverting :
83b04c60fac76ccd2d5aecb14f8896a07d488b1f..
6e66512d5beb256a44c6703cdb8c7fa7e0fd8537.
We still need to address https://bugzilla.redhat.com/show_bug.cgi?id=429024, but this
will come later.
Jeremy.
Alexander Bokovoy [Thu, 29 May 2008 09:13:59 +0000 (13:13 +0400)]
Fix documentation networkless build. We did override build/catalog.xml but didn't define BUILDDIR for it
Gerald W. Carter [Wed, 28 May 2008 12:40:51 +0000 (07:40 -0500)]
Updating release notes for 3.0.30 security release.
Gerald W. Carter [Wed, 28 May 2008 12:30:19 +0000 (07:30 -0500)]
Security: Patche for CVE-2008-1105.
-- Summary --
Specifically crafted SMB responses can result
in a heap overflow in the Samba client code.
Because the server process, smbd, can itself
act as a client during operations such as
printer notification and domain authentication,
this issue affects both Samba client and server
installations.
Ensure that we specify the buffer size used to store incoming SMB
packets. This bug was originally introduced in Samba 2.2.4. Patch from
Jeremy Allison.
Gerald W. Carter [Tue, 27 May 2008 21:30:54 +0000 (16:30 -0500)]
Release scripts: Copy the support release scripts from the v3-3-tree
(cherry picked from commit
8555ceeca7ac50f18589c07d2deb45c1d6fe8010)
Günther Deschner [Wed, 28 May 2008 11:20:16 +0000 (13:20 +0200)]
Fix Bug #5285. (libcap header mismatch)
Can someone with gpfs available test this ? The only codepath using this
function is the modules/gpfs.c module. The fix resolves at least the build
issues Samba has with recent kernel / libcap versions by using the portable
cap_get_proc()/cap_set_proc() interface (instead of using capget/capset).
Guenther
Jeremy Allison [Tue, 27 May 2008 19:28:21 +0000 (12:28 -0700)]
Memory leak fixes from Chere Zhou <czhou@isilon.com>.
Jeremy.
Jim McDonough [Tue, 27 May 2008 09:32:20 +0000 (05:32 -0400)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into 3.0-test
Gerald Carter [Fri, 23 May 2008 18:15:02 +0000 (13:15 -0500)]
Set version in v3-0-test to 3.0.30-GIT
Steven Danneman [Wed, 7 May 2008 20:34:26 +0000 (13:34 -0700)]
spnego SPN fix when contacting trusted domains
cli_session_setup_spnego() was not taking into consideration the situation
where we're connecting to a trusted domain, specifically one (like W2K8)
which doesn't return a SPN in the NegTokenInit.
This caused two problems:
1) When guessing the SPN using kerberos_get_default_realm_from_ccache() we
were always using our default realm, not the realm of the domain we're
connecting to.
2) When falling back on NTLMSSP for authentication we were passing the name
of the domain we're connecting to for use in our credentials when we should be
passing our own workgroup name.
The fix for both was to split the single "domain" parameter into
"user_domain" and "dest_realm" parameters. We use the "user_domain"
parameter to pass into the NTLM call, and we used "dest_realm" to create an SPN
if none was returned in the NegTokenInit2 packet. If no "dest_realm" is
provided we assume we're connecting to our own domain and use the credentials
cache to build the SPN.
Since we have a reasonable guess at the SPN, I removed the check that defaults
us directly to NTLM when negHint is empty.
Steven Danneman [Thu, 8 May 2008 20:34:49 +0000 (13:34 -0700)]
Use machine account and machine password from our domain when
contacting trusted domains.
John H Terpstra [Fri, 23 May 2008 13:30:23 +0000 (08:30 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Karolin Seeger [Thu, 22 May 2008 09:00:19 +0000 (11:00 +0200)]
man pages: Remove ldb man pages.
Ldb-tools will be available starting with 3.2.
Karolin
John H Terpstra [Wed, 21 May 2008 20:39:14 +0000 (15:39 -0500)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into v3-0-test
Jeremy Allison [Wed, 21 May 2008 20:06:46 +0000 (13:06 -0700)]
Make 3.0.x in sync with 3.2 here.
Jeremy.