14 years agor4388: - allow ACE flags to be specified in security_descriptor_create()
Andrew Tridgell [Wed, 29 Dec 2004 06:53:15 +0000 (06:53 +0000)]
r4388: - allow ACE flags to be specified in security_descriptor_create()

- added a test for all combinations of the inheritance ACE flags and how
  they are propogated to child directories and files
(This used to be commit fdb38c8e4b6279137892402b21d2d52e1921e456)

14 years agor4387: added a TODO about the NTCREATEX_FLAGS_OPEN_DIRECTORY flag - it seems to open
Andrew Tridgell [Wed, 29 Dec 2004 06:52:06 +0000 (06:52 +0000)]
r4387: added a TODO about the NTCREATEX_FLAGS_OPEN_DIRECTORY flag - it seems to open
the parent of the specified directory ?!
(This used to be commit a012d1c978a478fe8debf0c546ed770047dbfbcf)

14 years agor4386: Grr, fix copy-and-paste bug.
Andrew Bartlett [Wed, 29 Dec 2004 00:03:34 +0000 (00:03 +0000)]
r4386: Grr, fix copy-and-paste bug.

Andrew Bartlett
(This used to be commit 13aa88ed65a8914000cccbecf80929db3df65037)

14 years agor4385: Set the correct target service.
Andrew Bartlett [Tue, 28 Dec 2004 23:59:22 +0000 (23:59 +0000)]
r4385: Set the correct target service.

Andrew Bartlett
(This used to be commit 722f59c7c8d09f548d9325c6051d6687d7aa16c2)

14 years agor4384: Try again to fix compiling against a specified KRB5 library.
Andrew Bartlett [Tue, 28 Dec 2004 23:55:58 +0000 (23:55 +0000)]
r4384: Try again to fix compiling against a specified KRB5 library.

The strong feeling I get is that this is just not possible, if as
Fedora has, the MIT installation is in /usr/lib, but this is one step
closer anyway.

Andrew Bartlett
(This used to be commit da4cf53767ca567497c4c7f341795246bb306892)

14 years agor4383: in order to cope with overfilled buffers on trans2 findfirst we need to use...
Andrew Tridgell [Tue, 28 Dec 2004 23:28:02 +0000 (23:28 +0000)]
r4383: in order to cope with overfilled buffers on trans2 findfirst we need to use 32 bit offsets and lengths
in trans2 fill code, even though the packets themselves can only use 16 bit lengths. This prevents
the overflow detection code from failing due to 16 bit length wrap.
(This used to be commit 5cd74c22e99bc78e1f3ddf3f098790c4b4b87b4f)

14 years agor4382: check for bad tid in SMBtdis
Andrew Tridgell [Tue, 28 Dec 2004 23:26:29 +0000 (23:26 +0000)]
r4382: check for bad tid in SMBtdis
(This used to be commit 44ca3f41cc835e22e6adca48ddfd84f246b22bfb)

14 years agor4381: Add my copyright
Volker Lendecke [Tue, 28 Dec 2004 23:05:48 +0000 (23:05 +0000)]
r4381: Add my copyright
(This used to be commit 9e27a83ac3b1470ba52df01743d9a64fcbecc64b)

14 years agor4380: Implement samr_QueryDisplayInfo. This probably needs some polishing (Do we
Volker Lendecke [Tue, 28 Dec 2004 23:01:34 +0000 (23:01 +0000)]
r4380: Implement samr_QueryDisplayInfo. This probably needs some polishing (Do we
have to sort the entries?)

(This used to be commit 26d21bb5cc26964f2d790aa83149ba399ac50db2)

14 years agor4379: Merge more Kerberos related configure checks (by jra, gd and Lars
Andrew Bartlett [Tue, 28 Dec 2004 22:29:48 +0000 (22:29 +0000)]
r4379: Merge more Kerberos related configure checks (by jra, gd and Lars
Mueller <>) from 3.0 to Samba4.

Andrew Bartlett
(This used to be commit 9c74e04098d50427f93219a6a451c44a2373db46)

14 years agor4378: Implement samr_EnumDomainGroups and samr_EnumDomainAliases.
Volker Lendecke [Tue, 28 Dec 2004 07:57:31 +0000 (07:57 +0000)]
r4378: Implement samr_EnumDomainGroups and samr_EnumDomainAliases.

Hmmm. How do I tell ldb not to descend into cn=Builtin?

(This used to be commit c95d20cd7c18fbfb5e6e9a5efac07354117610c5)

14 years agor4377: Fix default groupType attributes.
Volker Lendecke [Tue, 28 Dec 2004 07:54:30 +0000 (07:54 +0000)]
r4377: Fix default groupType attributes.

(This used to be commit 15d50350b596068643fb8e28d2a8cb45ac4d6204)

14 years agor4376: Implement samr_AddAliasMember, samr_DeleteAliasMember and
Volker Lendecke [Mon, 27 Dec 2004 22:20:17 +0000 (22:20 +0000)]
r4376: Implement samr_AddAliasMember, samr_DeleteAliasMember and

(This used to be commit 78802720ae922cf8ad19bf2e8be23a64435c4673)

14 years agor4375: Implement samr_OpenAlias, samr_QueryAliasInfo and samr_SetAliasInfo. Fix IDL
Volker Lendecke [Mon, 27 Dec 2004 11:27:30 +0000 (11:27 +0000)]
r4375: Implement samr_OpenAlias, samr_QueryAliasInfo and samr_SetAliasInfo. Fix IDL
for samr_SetAliasInfo.

(This used to be commit d70e2371903fb21e24ab2e23d04ee4b0b2ef55e5)

14 years agor4374: Follow metzes hint, change LookupRids a bit
Volker Lendecke [Mon, 27 Dec 2004 09:48:49 +0000 (09:48 +0000)]
r4374: Follow metzes hint, change LookupRids a bit
(This used to be commit b8fa5b9419c6397a4266bfdce3a31b1e016d7faa)

14 years agor4373: Support setting values and fix a segfault
Jelmer Vernooij [Mon, 27 Dec 2004 00:32:13 +0000 (00:32 +0000)]
r4373: Support setting values and fix a segfault
(This used to be commit cdb6980cdcf4b093e98b3b025f784333d46ac957)

14 years agor4372: Implement samr_LookupRids
Volker Lendecke [Sun, 26 Dec 2004 23:31:19 +0000 (23:31 +0000)]
r4372: Implement samr_LookupRids
(This used to be commit 1bab3254f6a27144c6f76edf66573f7fa25b3173)

14 years agor4371: Add "Create Key", "Delete Key" and "Delete Value" buttons.
Jelmer Vernooij [Sun, 26 Dec 2004 22:41:38 +0000 (22:41 +0000)]
r4371: Add "Create Key", "Delete Key" and "Delete Value" buttons.
gregedit now can do the same things as regedt32 except for finding
data and setting values. (and a few segfaults...)
(This used to be commit ada16f31e4da919731767ce31000aa270f22ffd5)

14 years agor4367: Implement samr_AddGroupMember, samr_DeleteGroupMember and
Volker Lendecke [Sun, 26 Dec 2004 18:02:18 +0000 (18:02 +0000)]
r4367: Implement samr_AddGroupMember, samr_DeleteGroupMember and

(This used to be commit 43581c3711d2eeb901094acebea294a3b87d4c0b)

14 years agor4366: Fix ldb_modify_internal: Adding values to an existing attribute you could end
Volker Lendecke [Sun, 26 Dec 2004 17:30:27 +0000 (17:30 +0000)]
r4366: Fix ldb_modify_internal: Adding values to an existing attribute you could end
up with a corrupt data structure on disk, namely with two attribute structures
for the same attribute name.

(This used to be commit 284044b5b20102894a8128f84ab41d59cfcc9285)

14 years agor4365: added command 'eainfo' to smbclient for displaying binary EA contents
Andrew Tridgell [Sun, 26 Dec 2004 08:41:11 +0000 (08:41 +0000)]
r4365: added command 'eainfo' to smbclient for displaying binary EA contents
(This used to be commit 268edcdb4a95240662102faef4126449f286d49d)

14 years agor4364: - added support for testing of chained SMB operations in smbtorture
Andrew Tridgell [Sun, 26 Dec 2004 08:13:01 +0000 (08:13 +0000)]
r4364: - added support for testing of chained SMB operations in smbtorture

- added test for chained OpenX/ReadX, simulating the OS/2 workplace shell

- fixed a bug in handling chained fnum in openx and ntcreatex in the server

(yes, I'm on holiday, but this bug was annoying me ....)
(This used to be commit b3b8958a18e302b815d98c0e3879e404bced6a08)

14 years agor4363: value "none required" is set if no library is needed (autoconf does this the...
Jelmer Vernooij [Sat, 25 Dec 2004 22:18:12 +0000 (22:18 +0000)]
r4363: value "none required" is set if no library is needed (autoconf does this the same way)
(This used to be commit 8cf15704101e5957e15a0401e4832faf1346f12e)

14 years agor4362: dlopen() doesn't imply -ldl
Jelmer Vernooij [Sat, 25 Dec 2004 21:49:21 +0000 (21:49 +0000)]
r4362: dlopen() doesn't imply -ldl
Should fix the build on several *BSD systems that have dlopen() in libc
(This used to be commit 6d2b8e71c177d1d35a8b975cd5f24089aaa2bb49)

14 years agor4361: fix the build
Stefan Metzmacher [Sat, 25 Dec 2004 14:12:31 +0000 (14:12 +0000)]
r4361: fix the build

(This used to be commit 78b2af77e9e4b97c698d6d9e680207b1df289cb4)

14 years agor4360: destroy the gensec context
Stefan Metzmacher [Sat, 25 Dec 2004 14:06:55 +0000 (14:06 +0000)]
r4360: destroy the gensec context

(This used to be commit a25770983b34bac5bd7dcce69241716386dc8509)

14 years agor4359: using talloc_free() of a child struct in a talloc_destructor is useless
Stefan Metzmacher [Sat, 25 Dec 2004 14:01:19 +0000 (14:01 +0000)]
r4359: using talloc_free() of a child struct in a talloc_destructor is useless

(This used to be commit e51f2cf43f2cbcf3c3bbb00abc99f1bddb9f7f35)

14 years agor4358: At metze's request, the Christmas elves have removed gensec_end in
Andrew Bartlett [Fri, 24 Dec 2004 23:02:39 +0000 (23:02 +0000)]
r4358: At metze's request, the Christmas elves have removed gensec_end in
favor of talloc_free().

Andrew Bartlett
(This used to be commit 1933cd12fbaed56e13f2386b19de6ade99bf9478)

14 years agor4357: Return a more sensible error code if a NULL (as opposed to the valid
Andrew Bartlett [Fri, 24 Dec 2004 10:56:23 +0000 (10:56 +0000)]
r4357: Return a more sensible error code if a NULL (as opposed to the valid
"") username is asked for.

Andrew Bartlett
(This used to be commit 9c9055603e1171e204f67b019900339f88414841)

14 years agor4356: Allow anonymous connections to use NTLMSSP. The silly bugs that
Andrew Bartlett [Fri, 24 Dec 2004 09:57:44 +0000 (09:57 +0000)]
r4356: Allow anonymous connections to use NTLMSSP.  The silly bugs that
prevented this are gone.

Andrew Bartlett
(This used to be commit 87dad5ec538abad93d621078a82f162675847f9f)

14 years agor4355: More work from the elves on Christmas eve:
Andrew Bartlett [Fri, 24 Dec 2004 09:54:23 +0000 (09:54 +0000)]
r4355: More work from the elves on Christmas eve:

 - Update Samba4's kerberos code to match the 'salting' changes in
   Samba3 (and many other cleanups by jra).

 - Move GENSEC into the modern era of talloc destructors.  This avoids
   many of the memory leaks in this code, as we now can't somehow
   'forget' to call the end routine.
  - This required fixing some of the talloc hierarchies.

 - The new krb5 seems more sensitive to getting the service name
   right, so start actually setting the service name on the krb5 context.

Andrew Bartlett
(This used to be commit 278bf1a61a6da6ef955a12c13d7b1a0357cebf1f)

14 years agor4354: The ldb databases do not go in lib/private, but in private/ under PREFIX
Andrew Bartlett [Fri, 24 Dec 2004 06:39:18 +0000 (06:39 +0000)]
r4354: The ldb databases do not go in lib/private, but in private/ under PREFIX

Andrew Bartlett
(This used to be commit 9ccb2a39c34766d620059a56a925cb749a0ad6f4)

14 years agor4349: Start to fix the long-standing pain that --with-krb5 would be ignored if krb5...
Andrew Bartlett [Thu, 23 Dec 2004 21:48:32 +0000 (21:48 +0000)]
r4349: Start to fix the long-standing pain that --with-krb5 would be ignored if krb5-config was in the path.

I'll merge this to Samba3, before trying to merge all of the Samba3
changes to Samba4.

Andrew Bartlett
(This used to be commit 906ba7cb8af02d44c868805e0b108b966f3221af)

14 years agor4345: Unify the representation of grouptype and samaccounttype to hex. Without any
Volker Lendecke [Thu, 23 Dec 2004 12:14:12 +0000 (12:14 +0000)]
r4345: Unify the representation of grouptype and samaccounttype to hex. Without any
kind of schema support we only have string comparisons (Hmm. Is this true?)
and must agree upon a common representation for integers. I suspect that we
might sooner or later need a search filter for "This bit in this integer
attrib is being set".

(This used to be commit 5f2d93b66bc89d499c91638f9b71394768d135af)

14 years agor4344: Unify memory handling in dcerpc_samr.c a bit
Volker Lendecke [Thu, 23 Dec 2004 12:02:55 +0000 (12:02 +0000)]
r4344: Unify memory handling in dcerpc_samr.c a bit
(This used to be commit 79ec28ade826c6a36e129abbe1e0a207074c676f)

14 years agor4342: Fix a memory leak in init_globals().
Andrew Bartlett [Thu, 23 Dec 2004 06:39:58 +0000 (06:39 +0000)]
r4342: Fix a memory leak in init_globals().

Andrew Bartlett
(This used to be commit cc47b4c6fc932f8257506276eaa1a98a41055f8b)

14 years agor4341: Fix const warning.
Tim Potter [Thu, 23 Dec 2004 04:09:25 +0000 (04:09 +0000)]
r4341: Fix const warning.
(This used to be commit d8b1ba93a8ed0d5d01cb05b1c14353a0eca4de3e)

14 years agor4340: - simplify lsa_GetUserName() server code,
Stefan Metzmacher [Thu, 23 Dec 2004 03:02:57 +0000 (03:02 +0000)]
r4340: - simplify lsa_GetUserName() server code,
  we don't need to do db lookups as we already known who the user is

(This used to be commit cef0d1eb29c6c5d41591a5c0beaed1dc26961211)

14 years agor4339: - rename auth_guest to auth_anonymous
Stefan Metzmacher [Thu, 23 Dec 2004 03:00:55 +0000 (03:00 +0000)]
r4339: - rename auth_guest to auth_anonymous

- don't use static const strings in the server_info

- fix segfault when auth_sam gets "" as username

(This used to be commit 7fcbd483d4977cf6483f34ddd28e6c0182897ba2)

14 years agor4338: reuse netlogon structs in the krb5 PAC
Stefan Metzmacher [Thu, 23 Dec 2004 02:23:42 +0000 (02:23 +0000)]
r4338: reuse netlogon structs in the krb5 PAC
that simplifies the code a lot...

also add a note: we should fail the krb5 auth if there's no
PAC present (when heimdal is ready for that:-)

(This used to be commit 532641a7003d23b034a253d166482f18c2de6191)

14 years agor4335: Fix some potential memleaks, implement CreateDomAlias. Hmmmm. Isn't there
Volker Lendecke [Wed, 22 Dec 2004 22:19:54 +0000 (22:19 +0000)]
r4335: Fix some potential memleaks, implement CreateDomAlias. Hmmmm. Isn't there
enough stuff to do in 3_0??? ;-)

(This used to be commit c0fa7a92d9f602dc50801a9827e121c2b095a336)

14 years agor4332: Fix a potential memleak.
Volker Lendecke [Wed, 22 Dec 2004 21:20:12 +0000 (21:20 +0000)]
r4332: Fix a potential memleak.

(This used to be commit 8f2b9c9d320dbea197808081528477d7e4c816d1)

14 years agor4328: mark the talloc data as DATA_BLOB
Stefan Metzmacher [Tue, 21 Dec 2004 15:23:33 +0000 (15:23 +0000)]
r4328: mark the talloc data as DATA_BLOB

(This used to be commit ad84e3b2e3b48406576a8ba2ebfd218cddae135d)

14 years agor4327: add usefull function if you don't want that the data will talloc_memdup()'ed
Stefan Metzmacher [Tue, 21 Dec 2004 15:15:49 +0000 (15:15 +0000)]
r4327: add usefull function if you don't want that the data will talloc_memdup()'ed

(This used to be commit 1f01e370b192fc8fa51eb3a46e7b45c993aa9b80)

14 years agor4326: fix memory leak
Stefan Metzmacher [Tue, 21 Dec 2004 15:01:53 +0000 (15:01 +0000)]
r4326: fix memory leak

(This used to be commit 1ceeb77fc716729c69f2dba4a84579c366eefa1c)

14 years agor4325: add the GENSEC_FEATURE_DCE_STYLE flag
Stefan Metzmacher [Tue, 21 Dec 2004 12:39:39 +0000 (12:39 +0000)]
r4325: add the GENSEC_FEATURE_DCE_STYLE flag
this will be used by krb5 dcerpc auth

(This used to be commit 04dc7fb9b24a1e38f31559ec6032701a176209ae)

14 years agor4324: add some more ads constants before I forget them
Stefan Metzmacher [Tue, 21 Dec 2004 12:26:12 +0000 (12:26 +0000)]
r4324: add some more ads constants before I forget them

(This used to be commit 705af52cb163de780c4ba5a1d84acd6c53909918)

14 years agor4323: - implement the lsa_GetUserName() server call
Stefan Metzmacher [Tue, 21 Dec 2004 12:22:57 +0000 (12:22 +0000)]
r4323: - implement the lsa_GetUserName() server call

- give lsa_lookup_sid() a chance with foreign SIDS
  returning NT_STATUS_NO_MEMORY makes no sense here
  as the ldb_msg_find_string() doesn't allocate the string

(This used to be commit b43f34e87354c82a3392a0ba99b38b4c7185e47c)

14 years agor4322: use a nicer name
Stefan Metzmacher [Tue, 21 Dec 2004 12:00:30 +0000 (12:00 +0000)]
r4322: use a nicer name

(This used to be commit f8ea82cbd1856f589132e2a96b8d658745036b3e)

14 years agor4321: objectClass trustedDomain uses "securityIdentifier" for the sid
Stefan Metzmacher [Tue, 21 Dec 2004 11:52:53 +0000 (11:52 +0000)]
r4321: objectClass trustedDomain uses "securityIdentifier" for the sid

also explicit tell the fill_info code what kind of object the current
result is.

(This used to be commit 6d74d31e50cd8f9d37fca53ef32bd50952a3a759)

14 years agor4320: fix locations of new trusting domains and domsin controller
Stefan Metzmacher [Tue, 21 Dec 2004 11:49:36 +0000 (11:49 +0000)]
r4320: fix locations of new trusting domains and domsin controller
computer accounts

(This used to be commit f75c2004a0fc889ce5d96790f7d1d5031bce3992)

14 years agor4319: make it easy to use valgrind in the test suite
Andrew Tridgell [Tue, 21 Dec 2004 11:49:01 +0000 (11:49 +0000)]
r4319: make it easy to use valgrind in the test suite
(This used to be commit 7c09a3ea581e08bb34972d657d11d7e03b832b65)

14 years agor4318: add missing template for trusting domains
Stefan Metzmacher [Tue, 21 Dec 2004 11:48:32 +0000 (11:48 +0000)]
r4318: add missing template for trusting domains

(This used to be commit 32264c6c30c67372ce6f0b2f0914c43a1a6eb5ea)

14 years agor4317: check the count of replies in the os2 ea_list torture test
Andrew Tridgell [Tue, 21 Dec 2004 11:48:13 +0000 (11:48 +0000)]
r4317: check the count of replies in the os2 ea_list torture test
(This used to be commit 10861b3fa0cbba7f5e0ec3377431a85608a13a32)

14 years agor4316: - now that the trans2 code properly supports multi-part requests, we can set
Andrew Tridgell [Tue, 21 Dec 2004 11:47:08 +0000 (11:47 +0000)]
r4316: - now that the trans2 code properly supports multi-part requests, we can set
  a maximum sized max_data in libcli trans2 code

- fixed string termination in the EA_LIST trans2 findfirst level
(This used to be commit a2a5f147f4faac8a48ff8f1b3e5f1334c92575bb)

14 years agor4315: use the remote hosts max_xmit, not the local hosts, in calculating max trans2...
Andrew Tridgell [Tue, 21 Dec 2004 11:45:37 +0000 (11:45 +0000)]
r4315: use the remote hosts max_xmit, not the local hosts, in calculating max trans2 data sizes
(This used to be commit 827008cfebf29d081b457ba7162d89c8150cb24b)

14 years agor4314: added ACL checking on unlink
Andrew Tridgell [Tue, 21 Dec 2004 11:44:32 +0000 (11:44 +0000)]
r4314: added ACL checking on unlink
(This used to be commit f25c469693517ed993e0379d8b07cd7eb235a669)

14 years agor4313: fixed a bug in handling new xattrs in the tdb xattr backend
Andrew Tridgell [Tue, 21 Dec 2004 11:43:46 +0000 (11:43 +0000)]
r4313: fixed a bug in handling new xattrs in the tdb xattr backend
(This used to be commit c66b5a100c1b83adf034087fe2ce49fc77d84161)

14 years agor4310: fixed the authority_name field in lsa_GetUserName()
Andrew Tridgell [Tue, 21 Dec 2004 10:05:02 +0000 (10:05 +0000)]
r4310: fixed the authority_name field in lsa_GetUserName()
(This used to be commit f78506697ad23456fcac6e8916d0dad05b0df6cc)

14 years agor4309: idl and torture test for lsa_GetUserName()
Stefan Metzmacher [Tue, 21 Dec 2004 09:41:21 +0000 (09:41 +0000)]
r4309: idl and torture test for lsa_GetUserName()

why does samba3 return domain_name as in the unknown_name field in the code
and on the wire it returns DCERPC_FAULT_OP_RNG_ERROR?

all of my test machines NT4,W2K,W2K3,XP returned NULL

and if I file the string in the .in.* the server echos the strings back

(This used to be commit 67e765b7e984d7aac2a7786b5bd0c80d10d6de5d)

14 years agor4308: [out,ref] pointer needs to set (don't corrupt the stack and segfault)
Stefan Metzmacher [Tue, 21 Dec 2004 09:33:12 +0000 (09:33 +0000)]
r4308: [out,ref] pointer needs to set (don't corrupt the stack and segfault)


PS: <tridge> "silly tridge forgot a out [ref] var" :-)
(This used to be commit a46c68a80001f5fe9d37cc4ce374071b6fe63076)

14 years agor4303: a bit more consistent help on privileges commands in smbclient
Andrew Tridgell [Tue, 21 Dec 2004 03:29:09 +0000 (03:29 +0000)]
r4303: a bit more consistent help on privileges commands in smbclient
(This used to be commit 2d2e9e6373be153f991ee899e9d66cd3979e309f)

14 years agor4302: fixed all of the annoying gtk warnings. The code all seems to still work, but
Andrew Tridgell [Tue, 21 Dec 2004 03:28:26 +0000 (03:28 +0000)]
r4302: fixed all of the annoying gtk warnings. The code all seems to still work, but
given my lack of gtk experience, there are no guarantees.
(This used to be commit 11277b38a473022eb59f896d5e23aa1e56786008)

14 years agor4299: Store REG_SZ, REG_EXPAND_SZ and REG_DWORD values in human-readable (and human...
Jelmer Vernooij [Tue, 21 Dec 2004 00:31:18 +0000 (00:31 +0000)]
r4299: Store REG_SZ, REG_EXPAND_SZ and REG_DWORD values in human-readable (and human-editable) format in
the ldb registry backend.
(This used to be commit 6eafd055d1a7d45734a0112228e18ee59d1f7867)

14 years agor4298: Update to credentials.h after feedback from Andrew Bartlett
Jelmer Vernooij [Tue, 21 Dec 2004 00:01:02 +0000 (00:01 +0000)]
r4298: Update to credentials.h after feedback from Andrew Bartlett
Move pack/unpack of values in ldb registry backend to seperate functions
(This used to be commit ceb4e92735f6dae96bb0b9d98211c9808159e56a)

14 years agor4288: don't use struct dcerpc_interface_table anymore in the
Stefan Metzmacher [Mon, 20 Dec 2004 14:37:54 +0000 (14:37 +0000)]
r4288: don't use struct dcerpc_interface_table anymore in the
main rpc server code. let the backends specify a ndr_push/ndr_pull function
like we already do with the dispatch() function.

this allows an interface implmentation to work as real proxy
without needing to know the idl for an interface that means
just the plain decrypted payload can be forwarded

If someone want to write such a backend, patches are wellcome

(This used to be commit a150bdf140d9165a05cbc7cac40b6e3c03a7bd3c)

14 years agor4284: fixed a problem with very large EA lists and OS/2 clients. These
Andrew Tridgell [Mon, 20 Dec 2004 03:12:09 +0000 (03:12 +0000)]
r4284: fixed a problem with very large EA lists and OS/2 clients. These
checks on allocations need to go in a lot more places, but at least
this is a start.
(This used to be commit 99b0dac2292d72e3a77f105e8f2ef5a3838d7e1b)

14 years agor4283: adding a privilege that an account already has is not an error
Andrew Tridgell [Sun, 19 Dec 2004 11:34:19 +0000 (11:34 +0000)]
r4283: adding a privilege that an account already has is not an error
(This used to be commit 2a4c562896aabe391d6f675433db2e519f0ce4b0)

14 years agor4282: removed a spurious error message now we remove index entries in the modify...
Andrew Tridgell [Sun, 19 Dec 2004 10:58:36 +0000 (10:58 +0000)]
r4282: removed a spurious error message now we remove index entries in the modify call
(This used to be commit 58fcc326241e73cc8a122e6130b5ff0d6a3b9232)

14 years agor4281: fixed an ldb indexing bug in ldb found by volker.
Andrew Tridgell [Sun, 19 Dec 2004 10:56:29 +0000 (10:56 +0000)]
r4281: fixed an ldb indexing bug in ldb found by volker.

index entries were not always being removed on modify
(This used to be commit 9c668e7b43dc2d82d3d639b64c53e887723ccba7)

14 years agor4280: added server side support for lsa_AddPrivilegesToAccount() and lsa_RemovePrivi...
Andrew Tridgell [Sun, 19 Dec 2004 07:50:19 +0000 (07:50 +0000)]
r4280: added server side support for lsa_AddPrivilegesToAccount() and lsa_RemovePrivilegesFromAccount()

these are the last of the server side privileges functions. We should
now have a complete privileges implementation.
(This used to be commit 76db300232f5557377dca059d17ea3c28a0a425c)

14 years agor4279: added IDL and test code for lsa_AddPrivilegesToAccount() and lsa_RemovePrivile...
Andrew Tridgell [Sun, 19 Dec 2004 07:20:55 +0000 (07:20 +0000)]
r4279: added IDL and test code for lsa_AddPrivilegesToAccount() and lsa_RemovePrivilegesFromAccount()
(This used to be commit 705b870c73995609c8d3ebb24418538bfe20c05b)

14 years agor4278: - added server support for lsa_EnumPrivsAccount()
Andrew Tridgell [Sun, 19 Dec 2004 06:41:27 +0000 (06:41 +0000)]
r4278: - added server support for lsa_EnumPrivsAccount()
(This used to be commit a80c82d2635fce42482982d904f265199a000e10)

14 years agor4277: - added server support for lsa_EnumAccounts()
Andrew Tridgell [Sun, 19 Dec 2004 05:53:13 +0000 (05:53 +0000)]
r4277: - added server support for lsa_EnumAccounts()

- expanded the lsa test suite to better test lsa_EnumAccounts()
(This used to be commit bafdb1772977d98fd57bb31a328af7cb1deee788)

14 years agor4276: added server side support for lsa_OpenAccount()
Andrew Tridgell [Sun, 19 Dec 2004 05:01:52 +0000 (05:01 +0000)]
r4276: added server side support for lsa_OpenAccount()
(This used to be commit 4716334502a245bc1ffafd3a8a00662cfbdf8ba8)

14 years agor4275: improve the share type info
Andrew Tridgell [Sun, 19 Dec 2004 04:23:29 +0000 (04:23 +0000)]
r4275: improve the share type info
(This used to be commit 750deb7f225b753f6c1547f7582f4edc4d817c58)

14 years agor4274: make the prototype RAP netshareenum call return something a bit more sensible.
Andrew Tridgell [Sun, 19 Dec 2004 03:31:57 +0000 (03:31 +0000)]
r4274: make the prototype RAP netshareenum call return something a bit more sensible.
(This used to be commit b2e29756c2084f11d841d027e7d32952daae18d0)

14 years agor4269: expanded the note about what you need on linux for xattr support
Andrew Tridgell [Sun, 19 Dec 2004 00:52:08 +0000 (00:52 +0000)]
r4269: expanded the note about what you need on linux for xattr support
(This used to be commit 57394f44e9fa2070a6cb9ce2fb31431ffae45cb9)

14 years agor4267: fixed the charset code to use the builtin_functions.
Andrew Tridgell [Sun, 19 Dec 2004 00:13:24 +0000 (00:13 +0000)]
r4267: fixed the charset code to use the builtin_functions.

Jelmer, please be more careful about testing new code. Your charsets
register change completely broke charset handling on systems without
iconv, and slowed every system down as the builtins were not being
used at all.
(This used to be commit 0022b4d24c7bb649fd69fffca04c022ea6b33634)

14 years agor4264: fix acl handling on systems without xattr support
Andrew Tridgell [Sat, 18 Dec 2004 23:31:17 +0000 (23:31 +0000)]
r4264: fix acl handling on systems without xattr support
(This used to be commit 89845388ea82d9bfbdc6ca8da40f47437a270400)

14 years agor4263: added support for the trans2 RAW_SEARCH_EA_LIST information
Andrew Tridgell [Sat, 18 Dec 2004 04:38:43 +0000 (04:38 +0000)]
r4263: added support for the trans2 RAW_SEARCH_EA_LIST information
level. This is quite a strange level that we've never seen before, but
is used by the os2 workplace shell.

note w2k screws up this level when unicode is negotiated, so it only
passes the RAW-SEARCH test when you force non-unicode
(This used to be commit 25189b8fbf6515d573e3398dc9fca56505dc37b9)

14 years agor4262: a sniff from kukks showed that the FILE_ATTRIBUTE_NORMAL handling in
Andrew Tridgell [Sat, 18 Dec 2004 01:16:04 +0000 (01:16 +0000)]
r4262: a sniff from kukks showed that the FILE_ATTRIBUTE_NORMAL handling in
pvfs was not correct. This should fix a xcopy bug on OS/2.
(This used to be commit 7251f1fcdd8980e9c49a58e665374025e07bb8d0)

14 years agor4261: added the RAW_FILEINFO_EA_LIST trans2 qfileinfo and qpathinfo
Andrew Tridgell [Fri, 17 Dec 2004 22:47:49 +0000 (22:47 +0000)]
r4261: added the RAW_FILEINFO_EA_LIST trans2 qfileinfo and qpathinfo
level. Interestingly, this level did now show up on our trans2 scanner
previously as we didn't have the FLAGS2_EXTENDED_ATTRIBUTES bit set in
the client code. Now that we set that bit, new levels appear in
windows servers.
(This used to be commit 0b76d405a73e924dc2706f28bbf1084a59c9b393)

14 years agor4247: two more places that need the unlink hook
Andrew Tridgell [Fri, 17 Dec 2004 06:35:11 +0000 (06:35 +0000)]
r4247: two more places that need the unlink hook
(This used to be commit 795897b64f3c63baaf53a36eb1611293c2fd8974)

14 years agor4246: some very brief notes to myself on solving the case insensitivity
Andrew Tridgell [Fri, 17 Dec 2004 06:34:13 +0000 (06:34 +0000)]
r4246: some very brief notes to myself on solving the case insensitivity
problem, and the del *.* mangling problem. I promised jra that I would
write a longer description of these soon.
(This used to be commit b6827a03e77fd1db4cbd16d7b7fb4328ccfe7a46)

14 years agor4245: add a note about using a tdb to store xattr information, so you can
Andrew Tridgell [Fri, 17 Dec 2004 06:32:04 +0000 (06:32 +0000)]
r4245: add a note about using a tdb to store xattr information, so you can
have all Samba4 features on a plain posix filesystem.
(This used to be commit a6c4f4b7c9b9a66bde02bd1b63258dbc14dd48c9)

14 years agor4244: add more calls to pvfs_xattr_unlink_hook() on file/dir create, to try to beat...
Andrew Tridgell [Fri, 17 Dec 2004 05:03:57 +0000 (05:03 +0000)]
r4244: add more calls to pvfs_xattr_unlink_hook() on file/dir create, to try to beat race
conditions in the tdb xattr backend
(This used to be commit 3ac840159881ce6eeac27ff0dc324e4d6ac0a70a)

14 years agor4243: a sniff from kukks showed that the ea_set interface in trans2 setfileinfo...
Andrew Tridgell [Fri, 17 Dec 2004 04:51:23 +0000 (04:51 +0000)]
r4243: a sniff from kukks showed that the ea_set interface in trans2 setfileinfo allows
for multiple EAs to be set at once. This fixes all the ea code to allow for that.
(This used to be commit b26828bef5d55e5eef0e34a164e76292df45e207)

14 years agor4242: added support for storing xattrs in a tdb. This allows all advanced NT
Andrew Tridgell [Fri, 17 Dec 2004 03:39:29 +0000 (03:39 +0000)]
r4242: added support for storing xattrs in a tdb. This allows all advanced NT
attributes (streams, EAs, NT ACLs, timestamps etc) to be used on
filesystems that don't support xattrs. It also allows for large
streams, although they are very inefficient.

I won't enable this by default, as I really wrote it as a way of
testing large stream support while still using ext3, but perhaps with
a bit more work this could be generally usable.

To enable this use:

   posix:eadb = /home/test/myeas.tdb
(This used to be commit 0c927d912cb65754351189d3a0442004a14aa5c6)

14 years agor4232: added server support for multi-part SMBtrans requests, while
Andrew Tridgell [Thu, 16 Dec 2004 12:31:34 +0000 (12:31 +0000)]
r4232: added server support for multi-part SMBtrans requests, while
maintaining the async nature of the server. This is done with a
SMBtrans request queue for partially completed requests.

The smb signing issues with this get a little tricky, but it now seems
to work fine
(This used to be commit bc0209058b76a947ad27673aeb096d11a168996b)

14 years agor4230: now that we set the FLAGS2_EXTENDED_ATTRIBUTES flag, we should mark
Andrew Tridgell [Thu, 16 Dec 2004 12:29:47 +0000 (12:29 +0000)]
r4230: now that we set the FLAGS2_EXTENDED_ATTRIBUTES flag, we should mark
empty EAs as being of size 4, not size 0
(This used to be commit 76bd6476785e4145437768caa702c01a7801590e)

14 years agor4229: - added support for multi-part SMBtrans and SMBtrans2 requests in the
Andrew Tridgell [Thu, 16 Dec 2004 12:29:04 +0000 (12:29 +0000)]
r4229: - added support for multi-part SMBtrans and SMBtrans2 requests in the
  client code. This was essential to test the multi-part server code
  (which I will commit soon)

- when the request state is an error, ensure that req->status is not NT_STATUS_OK
(This used to be commit ef502c403044b68ccdff15b1a94d447d0f53473d)

14 years agor4228: make sure the caller knows the packet is in error when a signing error occurs
Andrew Tridgell [Thu, 16 Dec 2004 12:25:23 +0000 (12:25 +0000)]
r4228: make sure the caller knows the packet is in error when a signing error occurs
(This used to be commit 5e13571e6b9f5eb35f710c2c8bd85b5569665613)

14 years agor4227: index the privilege attribute to make lsa privilege calls efficient
Andrew Tridgell [Thu, 16 Dec 2004 12:24:25 +0000 (12:24 +0000)]
r4227: index the privilege attribute to make lsa privilege calls efficient
(This used to be commit e9e603208d79dc69c75420a8e085f8ad6c8a7095)

14 years agor4214: possibly fix the "no-EAs" bug from OS/2
Andrew Tridgell [Wed, 15 Dec 2004 03:53:05 +0000 (03:53 +0000)]
r4214: possibly fix the "no-EAs" bug from OS/2
(This used to be commit c9871253485b1a663fc79649742d3a89e81eb6d4)

14 years agor4213: Store REG_SZ in UTF16, not the unix charset..
Jelmer Vernooij [Wed, 15 Dec 2004 02:27:22 +0000 (02:27 +0000)]
r4213: Store REG_SZ in UTF16, not the unix charset..

It is now possible to use the "Add..." button in the Security
tab of the File Properties Dialog box.
(This used to be commit 9fa25260d3f18dd0dd041477c48571b53d86f3c4)

14 years agor4210: Add simple example of a registry hive LDIF file
Jelmer Vernooij [Wed, 15 Dec 2004 00:39:39 +0000 (00:39 +0000)]
r4210: Add simple example of a registry hive LDIF file
(This used to be commit cd9572b72e8d282ec47d2d67f6daa00ff1aa621c)

14 years agor4209: Fix several smaller bugs
Jelmer Vernooij [Wed, 15 Dec 2004 00:16:54 +0000 (00:16 +0000)]
r4209: Fix several smaller bugs
Add "predef" and "set" commands in regshell

Some of the remote calls from a Windows box work now.
(This used to be commit f3e05782804fe4b4942fa966f1b9650c64bc234d)

14 years agor4207: remove "lookupname" and "lookupsid", and instead have a single "lookup" comman...
Andrew Tridgell [Tue, 14 Dec 2004 22:24:56 +0000 (22:24 +0000)]
r4207: remove "lookupname" and "lookupsid", and instead have a single "lookup" command that
takes a name or sid.

I think in general its better to make smbclient automatically work out the type from
the format (I did the same with the privileges commands)
(This used to be commit bbf482e13ab973a67e9b2c0e0e40c2afff073c63)

14 years agor4206: fixed a status code check in lsa_LookupNames2 that could cause a segv
Andrew Tridgell [Tue, 14 Dec 2004 22:18:33 +0000 (22:18 +0000)]
r4206: fixed a status code check in lsa_LookupNames2 that could cause a segv
(This used to be commit 31ab04f790ff4349dbc8a24c07fa35e10b831baf)