Jelmer Vernooij [Sat, 11 Oct 2008 17:44:10 +0000 (19:44 +0200)]
Provide malloc_array() in Samba 4.
Jelmer Vernooij [Sat, 11 Oct 2008 19:02:13 +0000 (21:02 +0200)]
Use data_blob() for now, since it seems to be the only function available in both Samba 3 and Samba 4.
Jelmer Vernooij [Sat, 11 Oct 2008 18:44:19 +0000 (20:44 +0200)]
Provide the same set of helper functions for DEBUG in Samba 3 and Samba
4, even though the macros are still different.
This makes it possible to use object code compiled with one DEBUG()
macro from the other sourceX directory.
Jelmer Vernooij [Sat, 11 Oct 2008 18:26:40 +0000 (20:26 +0200)]
Make sure to allocate copy for arc4 data, to avoid problems freeing
later.
Jelmer Vernooij [Sat, 11 Oct 2008 14:17:14 +0000 (16:17 +0200)]
Prevent errors with data_blob() being a macro in s4 and function in s3.
Jelmer Vernooij [Sat, 11 Oct 2008 12:44:10 +0000 (14:44 +0200)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba into arc4
Volker Lendecke [Fri, 10 Oct 2008 21:40:50 +0000 (23:40 +0200)]
Make use of talloc_tos()
Volker Lendecke [Fri, 10 Oct 2008 15:50:09 +0000 (17:50 +0200)]
Fix some nonempty blank lines
Volker Lendecke [Fri, 10 Oct 2008 14:26:34 +0000 (16:26 +0200)]
Fix a "nexted extern declaration" warning
Jeremy Allison [Fri, 10 Oct 2008 23:48:18 +0000 (16:48 -0700)]
Initialize near creation of resource. Makes code clearer.
Jeremy.
Jeremy Allison [Fri, 10 Oct 2008 23:43:13 +0000 (16:43 -0700)]
Ensure we do reinit_after_fork().
Jeremy.
Jeremy Allison [Fri, 10 Oct 2008 23:29:14 +0000 (16:29 -0700)]
Allow data flow to be debugged and only log on error. All seems ok now.
Jeremy.
Jeremy Allison [Fri, 10 Oct 2008 22:55:49 +0000 (15:55 -0700)]
Async is trickier than it looks :-). Don't use a stack variable for a private data ptr.
Jeremy.
Jeremy Allison [Fri, 10 Oct 2008 18:55:14 +0000 (11:55 -0700)]
If you have a large number of cups printers, then scanning for print info can cause a client to timeout
(it takes longer than 30 seconds to enumerate them). Make scanning for printers async with a callback
from the main loop. This fixes a bug that was irritating *me* :-).
Jeremy.
Günther Deschner [Thu, 14 Aug 2008 12:41:50 +0000 (14:41 +0200)]
pam_winbind: document mkhomedir option.
Guenther
Günther Deschner [Thu, 14 Aug 2008 12:39:52 +0000 (14:39 +0200)]
pam_winbind: re-add mkhomedir option.
Guenther
Günther Deschner [Fri, 29 Aug 2008 14:12:04 +0000 (16:12 +0200)]
pam_winbind: remove unused pam_winbind_request().
Guenther
Günther Deschner [Tue, 19 Aug 2008 12:52:24 +0000 (14:52 +0200)]
pam_winbind: fix wbc_auth_error_to_pam_error().
Guenther
Günther Deschner [Mon, 25 Aug 2008 12:35:42 +0000 (14:35 +0200)]
pam_winbind: remove some unused macros.
Guenther
Günther Deschner [Tue, 19 Aug 2008 12:51:31 +0000 (14:51 +0200)]
pam_winbind: remove NETLOGON_CACHED_ACCOUNT and NETLOGON_GRACE_LOGON.
Guenther
Günther Deschner [Tue, 19 Aug 2008 12:48:23 +0000 (14:48 +0200)]
pam_winbind: remove ACB_PWNOEXP.
Guenther
Günther Deschner [Tue, 19 Aug 2008 09:07:59 +0000 (11:07 +0200)]
pam_winbind: use libwbclient for WINBINDD_PAM_AUTH.
Guenther
Günther Deschner [Fri, 15 Aug 2008 12:00:20 +0000 (14:00 +0200)]
pam_winbind: use libwbclient for WINBINDD_PAM_LOGOFF.
Guenther
Günther Deschner [Fri, 15 Aug 2008 00:34:22 +0000 (02:34 +0200)]
pam_winbind: use libwbclient for WINBINDD_PAM_CHAUTHTOK.
Guenther
Günther Deschner [Thu, 14 Aug 2008 21:33:12 +0000 (23:33 +0200)]
pam_winbind: use libwbclient for WINBINDD_LOOKUPNAME/LOOKUPSID.
Guenther
Günther Deschner [Thu, 14 Aug 2008 16:17:00 +0000 (18:17 +0200)]
pam_winbind: use libwbclient for WINBINDD_INFO.
Guenther
Günther Deschner [Thu, 14 Aug 2008 16:15:29 +0000 (18:15 +0200)]
pam_winbind: use libwbclient for WINBINDD_GETPWNAM.
Guenther
Günther Deschner [Tue, 19 Aug 2008 11:36:39 +0000 (13:36 +0200)]
pam_winbind: add _pam_check_remark_auth_err().
Guenther
Günther Deschner [Tue, 19 Aug 2008 08:59:18 +0000 (10:59 +0200)]
pam_winbind: add wbc_auth_error_to_pam_error().
Guenther
Günther Deschner [Fri, 15 Aug 2008 01:13:18 +0000 (03:13 +0200)]
pam_winbind: add wbc_error_to_pam_error().
Guenther
Günther Deschner [Thu, 14 Aug 2008 16:15:00 +0000 (18:15 +0200)]
pam_winbind: prepare to use libwbclient inside pam_winbind.
Guenther
Günther Deschner [Thu, 14 Aug 2008 14:53:51 +0000 (16:53 +0200)]
pam_winbind: convert to use talloc.
Guenther
Günther Deschner [Fri, 10 Oct 2008 13:18:02 +0000 (15:18 +0200)]
libwbclient: add wbcLogonUser().
Guenther
Günther Deschner [Fri, 15 Aug 2008 11:53:23 +0000 (13:53 +0200)]
libwbclient: add wbcLogoffUserEx().
Guenther
Günther Deschner [Wed, 24 Sep 2008 23:31:12 +0000 (01:31 +0200)]
libwbclient: add wbcAddNamedBlob.
Guenther
Günther Deschner [Fri, 10 Oct 2008 08:54:06 +0000 (10:54 +0200)]
libwbclient: add wbcBlob and wbcNamedBlob.
Guenther
Günther Deschner [Fri, 10 Oct 2008 13:13:14 +0000 (15:13 +0200)]
libwbclient: fix wbcAuthenticateUserEx() to not ignore provided flags field.
Guenther
Jelmer Vernooij [Wed, 8 Oct 2008 15:19:46 +0000 (17:19 +0200)]
Use const.
Jelmer Vernooij [Wed, 8 Oct 2008 15:09:42 +0000 (17:09 +0200)]
Fix executability of samba3-srv.
Günther Deschner [Tue, 7 Oct 2008 16:54:08 +0000 (18:54 +0200)]
krb5_locator: use wbcLookupDomainControllerEx() for query.
Guenther
Tim Prouty [Wed, 8 Oct 2008 18:06:18 +0000 (11:06 -0700)]
remove common lib object files on make cleanlib from source3
source4 already cleans up the object files on make clean. This patch
modifies source3 to also do this.
Tim Prouty [Wed, 8 Oct 2008 18:48:01 +0000 (11:48 -0700)]
Add support for autogen to take a --version-file argument
Jeremy Allison [Thu, 9 Oct 2008 22:40:00 +0000 (15:40 -0700)]
Ensure we handle signals correctly during the async calls.
Jeremy.
Jeremy Allison [Thu, 9 Oct 2008 16:49:03 +0000 (09:49 -0700)]
Remove SEC_ACCESS. It's a uint32_t.
Jeremy.
Volker Lendecke [Thu, 9 Oct 2008 15:22:59 +0000 (17:22 +0200)]
Make use of ZERO_STRUCT (the first memset was actually wrong)
Jeff Layton [Thu, 9 Oct 2008 13:58:40 +0000 (09:58 -0400)]
mount.cifs: make return codes match the return codes for /bin/mount (try #3)
The manpage for /bin/mount specifies that the return code should be a
positive integer (actually, it's a bitfield). Clean up the return
codes from mount.cifs to make them match the expected return values
from /bin/mount. This necessary for proper integration with autofs.
This is the third attempt at this patch. The changes here are minor,
just changing some return's from main() into exit() calls for
consistency's sake.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Thu, 9 Oct 2008 13:58:39 +0000 (09:58 -0400)]
mount.cifs: have uppercase_string return success on NULL pointer
We currently don't attempt to uppercase the device portion of the mount
string if there isn't a prefixpath. Fix that by making uppercase_string
return success without doing anything on a NULL pointer.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Günther Deschner [Sat, 27 Sep 2008 01:29:01 +0000 (03:29 +0200)]
wbclient: add wbcLookupDomainControllerEx call.
Guenther
Günther Deschner [Thu, 2 Oct 2008 11:11:31 +0000 (13:11 +0200)]
wbclient: add wbcGuidToString and wbcStringToGuid helper functions.
Guenther
Günther Deschner [Thu, 2 Oct 2008 11:06:50 +0000 (13:06 +0200)]
wbclient: add wbcGuid structure.
Guenther
Günther Deschner [Thu, 2 Oct 2008 11:07:14 +0000 (13:07 +0200)]
wbclient: add my copyright.
Guenther
Günther Deschner [Sat, 27 Sep 2008 01:11:59 +0000 (03:11 +0200)]
krb5-locator: fix dsgetdcname caller.
Guenther
Günther Deschner [Sat, 27 Sep 2008 01:11:33 +0000 (03:11 +0200)]
wbinfo: fix dsgetdcname caller.
Guenther
Günther Deschner [Sat, 27 Sep 2008 01:09:07 +0000 (03:09 +0200)]
s3-winbindd: use new, richer structures in WINBINDD_DSGETDCNAME implementation.
Guenther
Volker Lendecke [Wed, 8 Oct 2008 15:42:22 +0000 (17:42 +0200)]
Remove a pointless level of indirection
Volker Lendecke [Wed, 8 Oct 2008 15:24:24 +0000 (17:24 +0200)]
Fix a typo
Günther Deschner [Thu, 9 Oct 2008 09:45:03 +0000 (11:45 +0200)]
build: add "make test_wbpad" for checking winbind 32/64bit structure padding.
Guenther
Günther Deschner [Sat, 27 Sep 2008 01:05:47 +0000 (03:05 +0200)]
s3-winbindd: add dsgetdcname request and reply to winbind structure.
Guenther
Jeremy Allison [Thu, 9 Oct 2008 01:06:58 +0000 (18:06 -0700)]
For the vfs_acl_xattr.c module, make sure we map GENERIC file and directory bits
to specific bits every time a security descriptor is set. The S4 torture suite proves
that generic bits are not returned when querying an ACL set using them (ie. only
the specific bits are stored on disk).
Jeremy.
Tim Prouty [Wed, 8 Oct 2008 03:16:04 +0000 (20:16 -0700)]
Fixed "might be uninitialized" warning
Jeremy Allison [Wed, 8 Oct 2008 22:18:25 +0000 (15:18 -0700)]
Deal with inheritance from parent directory when setting Windows
ACLs.
Jeremy.
Jeremy Allison [Wed, 8 Oct 2008 18:39:32 +0000 (11:39 -0700)]
Fix bug #5814 - Winbindd dumping core in a strange manner while doing "rescan_trusted_domain".
From analysis by hargagan <shargagan@novell.com> :
"The winbindd_child_died() is also getting called from process_loop() in case of
SIGCHLD signal. In this case it doesn't make the timeout_handler to NULL for
the first request. It then initiate a new request using
schedule_async_request() which installs a new timeout handler for the same
request. In such a case, for a badly unresponsive system both the timeout
handler can be called. For the first call the "private_data" will be cleared
and for another call the timeout handler will be detecting the double free. So,
for such a case as well, the winbindd_child_died() should make the
timeout_handler to NULL."
Jeremy.
Volker Lendecke [Wed, 8 Oct 2008 10:56:04 +0000 (12:56 +0200)]
Remove unused CHECK_FSP macro
Jelmer Vernooij [Wed, 8 Oct 2008 10:08:52 +0000 (12:08 +0200)]
Remove duplicate copy of manual page.
Jelmer Vernooij [Wed, 8 Oct 2008 10:03:45 +0000 (12:03 +0200)]
fix libclinbtsrcdir variable.
Jelmer Vernooij [Wed, 8 Oct 2008 09:56:46 +0000 (11:56 +0200)]
Add manpage for nmblookup, move nmblookup closer to nbt library.
Jelmer Vernooij [Wed, 8 Oct 2008 01:39:17 +0000 (03:39 +0200)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Jelmer Vernooij [Wed, 8 Oct 2008 01:33:38 +0000 (03:33 +0200)]
Fix subunit files location after cherrypicks.
Jeremy Allison [Wed, 8 Oct 2008 00:56:32 +0000 (17:56 -0700)]
Fix const warning.
Jeremy.
Jeremy Allison [Wed, 8 Oct 2008 00:50:01 +0000 (17:50 -0700)]
Update vfs version as I've added a const to the security_descriptor paramter in fset_nt_acl().
Need to watch the build farm to make sure I haven't broken the AIX or Solaris ACL modules.
Jeremy.
Jelmer Vernooij [Wed, 8 Oct 2008 00:23:51 +0000 (02:23 +0200)]
Fix path apparently gone wrong by cherrypick.
Jelmer Vernooij [Wed, 8 Oct 2008 00:17:47 +0000 (02:17 +0200)]
Move all subunit files to lib directory.
Jelmer Vernooij [Wed, 8 Oct 2008 00:21:49 +0000 (02:21 +0200)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Jelmer Vernooij [Mon, 6 Oct 2008 23:23:34 +0000 (01:23 +0200)]
Fix syntax errors in minschema.
Jelmer Vernooij [Tue, 7 Oct 2008 23:58:42 +0000 (01:58 +0200)]
Import tests for subunit python module.
Jelmer Vernooij [Tue, 7 Oct 2008 23:48:44 +0000 (01:48 +0200)]
Move subunit helper utility to specific subunit directory.
Jelmer Vernooij [Mon, 6 Oct 2008 14:00:10 +0000 (16:00 +0200)]
Allow 'make testenv-dc', 'make testenv-member', etc.
Jelmer Vernooij [Mon, 6 Oct 2008 02:54:48 +0000 (04:54 +0200)]
Print proper error if include file can't be found.
Jeremy Allison [Tue, 7 Oct 2008 21:43:42 +0000 (14:43 -0700)]
Make map_errno_from_nt_status() a generic call, not just a cli specific one.
Remove some unused calls from vfs_acl_xattr. Test for SD's on existing files.
Jeremy.
Tim Prouty [Tue, 7 Oct 2008 17:56:30 +0000 (10:56 -0700)]
Changed variable name from
f19086872ec734fff3f2119712ff24117bec4e5e to match v3-[23]-test
Tim Prouty [Tue, 7 Oct 2008 00:09:48 +0000 (17:09 -0700)]
Fixed build warning "passing arg from incompatible pointer type"
The fix explicitly makes the conversion from timeval to time_t using the
existing time utility functions.
Compiling modules/vfs_smb_traffic_analyzer.c
modules/vfs_smb_traffic_analyzer.c: In function `smb_traffic_analyzer_send_data':
modules/vfs_smb_traffic_analyzer.c:173: warning: passing arg 1 of `localtime' from incompatible pointer type
Tim Prouty [Mon, 6 Oct 2008 23:41:46 +0000 (16:41 -0700)]
Fixed "declaration shadows global declaration" warnings.
The patch simply uses a more descriptive variable name for tcp_seq.
../lib/socket_wrapper/socket_wrapper.c:753: warning: declaration of 'tcp_seq' shadows a global declaration
/usr/include/netinet/tcp.h:40: warning: shadowed declaration is here
../lib/socket_wrapper/socket_wrapper.c: In function `swrap_marshall_packet':
../lib/socket_wrapper/socket_wrapper.c:919: warning: declaration of 'tcp_seq' shadows a global declaration
/usr/include/netinet/tcp.h:40: warning: shadowed declaration is here
Andrew Bartlett [Fri, 3 Oct 2008 23:36:49 +0000 (16:36 -0700)]
Set default trust kvno to -1
Andrew Bartlett [Thu, 2 Oct 2008 18:30:14 +0000 (11:30 -0700)]
Fix cross-realm authentication in Samba4's KDC.
Andrew Bartlett [Thu, 2 Oct 2008 18:29:34 +0000 (11:29 -0700)]
Allow the PAC to be passed along during cross-realm authentication
Andrew Bartlett [Wed, 1 Oct 2008 23:00:33 +0000 (16:00 -0700)]
Use the trust password version as kvno for trusts in Kerberos.
Andrew Bartlett [Wed, 1 Oct 2008 20:31:22 +0000 (13:31 -0700)]
Start implementing AD-style trusted domains in Samba4's NETLOGON server
Andrew Bartlett [Wed, 1 Oct 2008 20:12:15 +0000 (13:12 -0700)]
Store trusted domain passwords in the LSA server
Andrew Bartlett [Wed, 1 Oct 2008 20:11:11 +0000 (13:11 -0700)]
Make RPC-LSA test for enumeration conditions more strict
Andrew Bartlett [Wed, 1 Oct 2008 20:10:35 +0000 (13:10 -0700)]
Add in secure channel type used by AD trusts
Andrew Bartlett [Wed, 1 Oct 2008 20:10:11 +0000 (13:10 -0700)]
Clarify use of manual parsers in trustInOutBlob (drsblobs.idl)
Andrew Bartlett [Tue, 30 Sep 2008 21:24:58 +0000 (14:24 -0700)]
Implement 'type unknown' names in the CrackNames code.
This guesses the type by running each of the possible options.
Andrew Bartlett
Andrew Bartlett [Sat, 4 Oct 2008 17:25:46 +0000 (10:25 -0700)]
Remove compleatly bogus rename test in partitions module.
Andrew Bartlett [Fri, 3 Oct 2008 23:36:04 +0000 (16:36 -0700)]
Remove DESCRIPTION from generated schema lines.
This is not permitted in the AD aggregate schema, and more trouble
than it is worth in the OpenLDAP schema due to escaping issues.
Andrew Bartlett
Andrew Bartlett [Fri, 3 Oct 2008 23:25:59 +0000 (16:25 -0700)]
Fix Domain Trust creation with Windows 2008 (and many other tools)
A dITConentRules attribute (unlike objectClasses) must not contain a
'SUP'.
The ADSI layer in Windows would download the whole schema, and
validate it. Thanks to the team at Microsoft for very long debugging
session to find this.
Andrew Bartlett
Gerald (Jerry) Carter [Mon, 6 Oct 2008 16:47:57 +0000 (11:47 -0500)]
idmap_adex: Add more debugging to the basic search function.
Log the dn of all located entries in order to verify search results.
Gerald (Jerry) Carter [Mon, 6 Oct 2008 16:34:45 +0000 (11:34 -0500)]
idmap_adex: Add log messages to dc_add_domain for easier debugging.
Part of continue work on BUG 5806.
Stefan Metzmacher [Mon, 6 Oct 2008 17:39:53 +0000 (19:39 +0200)]
s4:rpc_server: tell the gensec layer that we want to do header signing
Note: header signing is still off by default, as the gensec backends
don't support it together with seal yet.
metze
Stefan Metzmacher [Wed, 1 Oct 2008 00:27:09 +0000 (02:27 +0200)]
s4:gensec: pass down want_features to the spnego backend mech
metze
Volker Lendecke [Mon, 6 Oct 2008 12:49:10 +0000 (14:49 +0200)]
If name_to_fqdn fails, retry with the dns domain the DC gave us
This is a workaround for the cases where you want to join under a netbios name
that is different from your hostname, i.e. a name that can not be found in
/etc/hosts or dns. In these cases, name_to_fqdn fails or gives invalid results.