Simo Sorce [Thu, 26 Jan 2012 20:27:54 +0000 (15:27 -0500)]
s3-pdb: Break SECRETS3 dependency on PDB.
This is causing circular depdnendcies that bring libpdb in all code and this is
BAD.
This change 'protects' the sid and guid of the domain by adding a special key
that makes them effectively read only.
Limit this temporarily to the samba 4 build, once it gets some good testing the
samba4 ifdefs can be dropped.
fix pdb dependencies
Signed-off-by: Andreas Schneider <asn@samba.org>
Stefan Metzmacher [Fri, 27 Jan 2012 12:39:54 +0000 (13:39 +0100)]
libcli/smb: fix smbXcli_negprot(..., PROTOCOL_NT1, PROTOCOL_SMB2_02)
The SMB1 negprot request already consumed the SMB2 sequence '0'.
This also happens for the SMB 2.02 case.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Fri Jan 27 15:27:41 CET 2012 on sn-devel-104
Andreas Schneider [Fri, 27 Jan 2012 09:40:29 +0000 (10:40 +0100)]
s3-waf: Create a subsystem for SERVER_MUTEX.
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Fri Jan 27 12:55:01 CET 2012 on sn-devel-104
Andreas Schneider [Fri, 27 Jan 2012 09:41:46 +0000 (10:41 +0100)]
s3-waf: Add missing dependency of ntlmssp to wbclient.
Andreas Schneider [Thu, 26 Jan 2012 10:36:07 +0000 (11:36 +0100)]
s3-waf: Add missing dependency of pdb_wbc_sam to wbclient.
Amitay Isaacs [Fri, 27 Jan 2012 05:57:46 +0000 (16:57 +1100)]
build: Add missing dependencies on popt
This fixes compilation issues on freebsd where system popt is installed
under /usr/local.
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Fri Jan 27 08:33:52 CET 2012 on sn-devel-104
Jeremy Allison [Fri, 27 Jan 2012 01:10:44 +0000 (17:10 -0800)]
Finally remove all malloc()'s from the substitute code. Now totally
talloc() based.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Jan 27 03:43:21 CET 2012 on sn-devel-104
Jeremy Allison [Thu, 26 Jan 2012 22:53:43 +0000 (14:53 -0800)]
Fix a really slow memory leak (in master at least). Found by Ira Cooper <ira@wakeful.net>.
Bug #8724 - Memory leak in parent smbd on connection.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Jan 27 01:26:28 CET 2012 on sn-devel-104
Stefan Metzmacher [Thu, 26 Jan 2012 08:21:21 +0000 (09:21 +0100)]
s3:auth/auth_generic: for now call sub_set_smb_name() and lp_load()
This matches the auth_ntlmssp case and the smbd/sesssetup.c code.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 26 17:58:17 CET 2012 on sn-devel-104
Stefan Metzmacher [Wed, 25 Jan 2012 10:18:00 +0000 (11:18 +0100)]
s3:gse: return NT_STATUS_LOGON_FAILURE instead of NT_STATUS_INTERNAL_ERROR
This matches the behavior of ads_verify_ticket().
Note that ads_verify_ticket() calls krb5_to_nt_status(), but
as a server it's likely to always returns NT_STATUS_UNSUCCESSFUL.
ads_verify_ticket() maps NT_STATUS_UNSUCCESSFUL to NT_STATUS_LOGON_FAILURE.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 26 10:48:36 CET 2012 on sn-devel-104
Andrew Bartlett [Wed, 25 Jan 2012 22:13:30 +0000 (09:13 +1100)]
s4-rpc_server: Fix search for existing trust to actually look for the dns name
Found by a eagle-eyed user.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu Jan 26 08:39:47 CET 2012 on sn-devel-104
Andrew Bartlett [Wed, 25 Jan 2012 04:56:05 +0000 (15:56 +1100)]
s3-build: Remove FIXME, bigballofmud is no more
Jeremy Allison [Thu, 26 Jan 2012 01:17:48 +0000 (17:17 -0800)]
Update man page to fix typo vfs_aio_fork -> vfs_aio_pthread, add
aio read size, aio write size examples.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Jan 26 03:51:01 CET 2012 on sn-devel-104
Jeremy Allison [Wed, 25 Jan 2012 23:30:56 +0000 (15:30 -0800)]
Use sys_pread/sys_pwrite to cope correctly with 64-bit sizes. As in the default VFS case fall back from pread -> read and pwrite -> write on an ESPIPE error in the worker thread.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Jan 26 02:11:28 CET 2012 on sn-devel-104
Jeremy Allison [Wed, 25 Jan 2012 22:11:12 +0000 (14:11 -0800)]
Add man page for vfs_aio_pthread module.
Volker Lendecke [Wed, 25 Jan 2012 15:43:49 +0000 (16:43 +0100)]
s3: Fix a panic in aio_pthread
Found by Nir Drang <nir@fabrix.tv>
Thanks!
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Wed Jan 25 18:22:37 CET 2012 on sn-devel-104
Andreas Schneider [Tue, 24 Jan 2012 18:03:12 +0000 (19:03 +0100)]
s3-waf: Reduce dependencies of winbindd.
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Wed Jan 25 13:31:19 CET 2012 on sn-devel-104
Andreas Schneider [Tue, 24 Jan 2012 17:14:57 +0000 (18:14 +0100)]
s3-waf: Reduce dependencies of smbd_base.
Andreas Schneider [Tue, 24 Jan 2012 17:25:18 +0000 (18:25 +0100)]
s3-waf: Fix cups dependency in PRINTING.
Andreas Schneider [Tue, 24 Jan 2012 17:14:42 +0000 (18:14 +0100)]
s3-waf: Add missing dependency to LIBNET.
Andreas Schneider [Tue, 24 Jan 2012 17:13:57 +0000 (18:13 +0100)]
s3-waf: Add missing dependency to RPC_WINREG.
Andreas Schneider [Tue, 24 Jan 2012 16:48:02 +0000 (17:48 +0100)]
s3-waf: Reduce libsmbclient dependencies.
Andreas Schneider [Tue, 24 Jan 2012 16:44:32 +0000 (17:44 +0100)]
s3-waf: Reduce libnetapi dependencies.
Andreas Schneider [Tue, 24 Jan 2012 16:01:08 +0000 (17:01 +0100)]
s3-waf: Link vlp only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:58:03 +0000 (16:58 +0100)]
s3-waf: Link split_tokens only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:54:02 +0000 (16:54 +0100)]
s3-waf: Link dbwrap_torture only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:51:39 +0000 (16:51 +0100)]
s3-waf: Link dbwrap_tool only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:49:17 +0000 (16:49 +0100)]
s3-waf: Link test_lp_load only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:46:55 +0000 (16:46 +0100)]
s3-waf: Link rpc_open_tcp only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:39:01 +0000 (16:39 +0100)]
s3-waf: Link ntlm_auth only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:30:51 +0000 (16:30 +0100)]
s3-waf: Link versiontest only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:29:34 +0000 (16:29 +0100)]
s3-waf: Link smbfilter only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:26:23 +0000 (16:26 +0100)]
s3-waf: Link locktest2 only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:23:11 +0000 (16:23 +0100)]
s3-waf: Link vfstest only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:15:32 +0000 (16:15 +0100)]
s3-waf: Link pdbtest only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:12:23 +0000 (16:12 +0100)]
s3-waf: Link locktest only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:08:59 +0000 (16:08 +0100)]
s3-waf: Link sharesec only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:06:01 +0000 (16:06 +0100)]
s3-waf: Link eventlogadm only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 15:03:02 +0000 (16:03 +0100)]
s3-waf: Link smbcquotas only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 14:57:15 +0000 (15:57 +0100)]
s3-waf: Link smbcacls only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 14:55:05 +0000 (15:55 +0100)]
s3-waf: Link msgtest only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 14:49:32 +0000 (15:49 +0100)]
s3-waf: Link maketest only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 14:41:07 +0000 (15:41 +0100)]
s3-waf: Link smbconftort only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 14:39:11 +0000 (15:39 +0100)]
s3-waf: Link nmblookup only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 14:38:56 +0000 (15:38 +0100)]
s3-waf: Link nmblookup only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 13:28:48 +0000 (14:28 +0100)]
s3-waf: Link smbget only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 13:26:38 +0000 (14:26 +0100)]
s3-waf: Link pdbedit only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 13:20:03 +0000 (14:20 +0100)]
s3-waf: Link smbpasswd only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 12:46:22 +0000 (13:46 +0100)]
s3-waf: Link smbtree only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 12:46:11 +0000 (13:46 +0100)]
s3-waf: Link smbstatus only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 12:16:55 +0000 (13:16 +0100)]
s3-waf: Link smbstatus only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 12:01:12 +0000 (13:01 +0100)]
s3-waf: Link smbta-util only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 11:54:28 +0000 (12:54 +0100)]
s3-waf: Link testparm only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 11:51:31 +0000 (12:51 +0100)]
s3-waf: Link smbspool only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 11:35:58 +0000 (12:35 +0100)]
s3-waf: Link profiles only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 10:52:20 +0000 (11:52 +0100)]
s3-waf: Link net only against needed subsystems.
Andreas Schneider [Tue, 24 Jan 2012 10:28:28 +0000 (11:28 +0100)]
s3-waf: Link smbclient only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 17:59:23 +0000 (18:59 +0100)]
s3-rpcclient: Remove debug_dsdcinfo_flags() call.
This gets rid of the DCUTIL dependency.
Andreas Schneider [Mon, 23 Jan 2012 17:56:04 +0000 (18:56 +0100)]
s3-waf: Link rpcclient only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 14:30:23 +0000 (15:30 +0100)]
s3-waf: Link swat only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 17:42:18 +0000 (18:42 +0100)]
s3-waf: Add missing dependencies to PASSCHANGE.
Andreas Schneider [Mon, 23 Jan 2012 17:41:35 +0000 (18:41 +0100)]
s3-waf: Add missing dependencies to LOCKING.
Andreas Schneider [Mon, 23 Jan 2012 14:14:20 +0000 (15:14 +0100)]
s3-waf: Link winbindd only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 13:46:45 +0000 (14:46 +0100)]
s3-waf: Link nmbd only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 13:46:31 +0000 (14:46 +0100)]
s3-waf: Link libcli_lsa3 only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 11:13:55 +0000 (12:13 +0100)]
s3-waf: Link errors3 only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 10:13:17 +0000 (11:13 +0100)]
s3-waf: Link tdb-wrap3 only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 09:41:01 +0000 (10:41 +0100)]
s3-waf: Link trusts_util only against needed subsystems.
Andreas Schneider [Mon, 23 Jan 2012 09:14:50 +0000 (10:14 +0100)]
s3-waf: Remove dead subsystem LIBNBT.
Andreas Schneider [Fri, 20 Jan 2012 16:58:46 +0000 (17:58 +0100)]
s3-waf: Link LIBNET_DSSYNC only against needed subsystems.
Andreas Schneider [Fri, 20 Jan 2012 14:53:00 +0000 (15:53 +0100)]
s3-waf: Link LIBNET only against needed subsystems.
Andreas Schneider [Fri, 20 Jan 2012 10:48:19 +0000 (11:48 +0100)]
s3-waf: Link smbd_base only against needed subsystems.
Andreas Schneider [Thu, 19 Jan 2012 09:12:18 +0000 (10:12 +0100)]
s3-waf: Link libsmb only against needed subsystems.
Andreas Schneider [Wed, 18 Jan 2012 13:57:07 +0000 (14:57 +0100)]
s3-waf: Link LIBNTLMSSP only against needed subsystems.
Andreas Schneider [Wed, 18 Jan 2012 13:41:08 +0000 (14:41 +0100)]
s3-waf: Remove LIBSMB_ERR completely.
Andreas Schneider [Wed, 18 Jan 2012 13:17:40 +0000 (14:17 +0100)]
s3-waf: Link samba3core against needed subsystems.
Andreas Schneider [Wed, 18 Jan 2012 11:19:15 +0000 (12:19 +0100)]
s3-waf: Don't link param_service against USER_UTIL twice.
Andreas Schneider [Wed, 18 Jan 2012 11:00:39 +0000 (12:00 +0100)]
s3-waf: Link param only against needed subsystems.
Andreas Schneider [Wed, 18 Jan 2012 13:24:31 +0000 (14:24 +0100)]
s3-waf: Add missing depcendencies to smbconf.
Andreas Schneider [Wed, 18 Jan 2012 10:57:49 +0000 (11:57 +0100)]
s3-waf: Remove unneeded PARAM_UTIL dependency.
Andreas Schneider [Wed, 18 Jan 2012 10:38:22 +0000 (11:38 +0100)]
s3-waf: Replace LIBMSRPC_GEN just with ndr-standard.
There is no need to link against dssetup and spoolss.
Andreas Schneider [Wed, 18 Jan 2012 10:17:16 +0000 (11:17 +0100)]
s3-waf: Link nss_wins only against needed subsystems.
Andreas Schneider [Wed, 18 Jan 2012 10:08:59 +0000 (11:08 +0100)]
s3-waf: Link smbclient only against needed subsystems.
Andreas Schneider [Tue, 17 Jan 2012 16:06:24 +0000 (17:06 +0100)]
s3-waf: Link netapi only against needed subsystems.
Andreas Schneider [Thu, 19 Jan 2012 10:11:11 +0000 (11:11 +0100)]
lib: Remove dead mszip code.
RIP, long live zlib.
Volker Lendecke [Wed, 25 Jan 2012 08:10:04 +0000 (09:10 +0100)]
Introduce dump_data_file
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Wed Jan 25 11:57:18 CET 2012 on sn-devel-104
Stefan Metzmacher [Tue, 24 Jan 2012 09:33:11 +0000 (10:33 +0100)]
auth/gensec_gssapi: sync gensec_gssapi_state with gse_context
Both use gss_krb5_lucid_context_v1_t now.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 25 10:22:31 CET 2012 on sn-devel-104
Stefan Metzmacher [Tue, 24 Jan 2012 09:31:54 +0000 (10:31 +0100)]
s3-gse: add GENSEC_FEATURE_NEW_SPNEGO detection in gensec_gse_have_feature()
metze
Stefan Metzmacher [Tue, 24 Jan 2012 12:48:33 +0000 (13:48 +0100)]
s3:build: require gss_krb5_export_lucid_sec_context() for ads support
This is needed to detect krb5 with aes for GENSEC_FEATURE_NEW_SPNEGO
at runtime.
metze
Stefan Metzmacher [Wed, 25 Jan 2012 04:22:38 +0000 (05:22 +0100)]
s3:smb2_sessetup: call set_current_user_info() and reload_services() on success
This matches the smb1 code.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 25 08:39:35 CET 2012 on sn-devel-104
Kelly Yeoh [Wed, 25 Jan 2012 03:58:44 +0000 (14:58 +1100)]
ldbedit: prevent a transaction warning on failure
if a modify fails then cancel the transaction to prevent a dangling
transaction error
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Jan 25 07:06:40 CET 2012 on sn-devel-104
Stefan Metzmacher [Tue, 24 Jan 2012 10:17:09 +0000 (11:17 +0100)]
Revert "s3:build: for now do not require gsskrb5_extract_authz_data_from_sec_context"
This reverts commit
74abe369df26c58094a601dd6ff8c27c3d0b2b2a.
Having gsskrb5_extract_authz_data_from_sec_context as symbol in the
library is in indicator that gss_inquire_sec_context_by_oid() would work.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 25 05:26:14 CET 2012 on sn-devel-104
Stefan Metzmacher [Tue, 24 Jan 2012 13:12:12 +0000 (14:12 +0100)]
Revert "build: Add -lz to wbinfo to fix build on some hosts"
This reverts commit
88daf798fec56a99e5eb3aed67f3b58572d97d34.
This is not needed as
5c88cfcc525290d0ad1c322401685c60c1abdf10 is the better
fix, see https://bugzilla.samba.org/show_bug.cgi?id=8711
metze
Matthieu Patou [Tue, 24 Jan 2012 22:48:31 +0000 (14:48 -0800)]
s3: improve the code in the AES encryption.
Remove looping replace them by memcpy.
Fix bug #8674 (Buffer overflow in vfs_smb_traffic_analyzer).
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Jan 25 03:12:14 CET 2012 on sn-devel-104
Jeremy Allison [Tue, 24 Jan 2012 22:41:30 +0000 (14:41 -0800)]
s3: Fix bug #8674.
Buffer overflow issue with AES encryption in samba traffic analyzer.
Amitay Isaacs [Tue, 24 Jan 2012 23:01:10 +0000 (10:01 +1100)]
s4-torture: For authenticated users, add AUTHENTICATED USERS sid
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Wed Jan 25 01:36:02 CET 2012 on sn-devel-104
Amitay Isaacs [Tue, 24 Jan 2012 23:00:31 +0000 (10:00 +1100)]
dlz_bind9: for authenticated user, set the AUTHENTICATED USERS sid in token
Volker Lendecke [Tue, 24 Jan 2012 20:04:40 +0000 (21:04 +0100)]
s3: Remove a typedef
We have it in README.Coding to avoid typedef for structs, but I
think it also applies to enums.
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Jan 24 22:45:50 CET 2012 on sn-devel-104
Volker Lendecke [Tue, 24 Jan 2012 20:04:00 +0000 (21:04 +0100)]
s3: Remove a typedef
Volker Lendecke [Tue, 24 Jan 2012 12:18:42 +0000 (13:18 +0100)]
s3: Add debug when a message is registered
We've always had the corresponding deregister message
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Jan 24 15:27:51 CET 2012 on sn-devel-104