bbaumbach/samba-autobuild/.git
8 years agodynconfig: --with-modulesdir should be a Samba option
Stefan Metzmacher [Tue, 17 Jan 2012 11:32:47 +0000 (12:32 +0100)]
dynconfig: --with-modulesdir should be a Samba option

This also restores the defaults from Samba 3.6.x:
"${libdir}" or "${libdir}/samba" in FHS mode.

metze

8 years agodynconfig/config.m4: expand prefix, exec_prefix, sysconfdir, localstatedir and dataro...
Stefan Metzmacher [Tue, 17 Jan 2012 11:29:53 +0000 (12:29 +0100)]
dynconfig/config.m4: expand prefix, exec_prefix, sysconfdir, localstatedir and datarootdir in Makefile

Otherwise $prefix is "NONE" without explicit --prefix

metze

8 years agos3:lib/messages: remove unused messaging_event_context()
Stefan Metzmacher [Mon, 16 Jan 2012 15:15:59 +0000 (16:15 +0100)]
s3:lib/messages: remove unused messaging_event_context()

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Jan 17 09:45:30 CET 2012 on sn-devel-104

8 years agos3:smbcontrol: avoid using messaging_event_context()
Stefan Metzmacher [Mon, 16 Jan 2012 15:14:35 +0000 (16:14 +0100)]
s3:smbcontrol: avoid using messaging_event_context()

metze

8 years agos3:smbcontrol: pass tevent_context down to wait_replies()
Stefan Metzmacher [Mon, 16 Jan 2012 15:11:42 +0000 (16:11 +0100)]
s3:smbcontrol: pass tevent_context down to wait_replies()

metze

8 years agos3:smbcontrol: pass tevent_context down to subcommands
Stefan Metzmacher [Mon, 16 Jan 2012 15:08:48 +0000 (16:08 +0100)]
s3:smbcontrol: pass tevent_context down to subcommands

metze

8 years agos3:printing: avoid messaging_event_context() in print_queue_housekeeping()
Stefan Metzmacher [Mon, 16 Jan 2012 14:54:41 +0000 (15:54 +0100)]
s3:printing: avoid messaging_event_context() in print_queue_housekeeping()

metze

8 years agos3-install: Don't let MANDIR and SRCDIR be overwritten
Volker Lendecke [Mon, 16 Jan 2012 15:43:10 +0000 (16:43 +0100)]
s3-install: Don't let MANDIR and SRCDIR be overwritten

In installman.sh, we get them via cmd line args

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Mon Jan 16 18:55:40 CET 2012 on sn-devel-104

8 years agos4:dsdb/password_hash: require a "Primary:Kerberos" blob in supplementalCredentials
Stefan Metzmacher [Mon, 16 Jan 2012 14:32:21 +0000 (15:32 +0100)]
s4:dsdb/password_hash: require a "Primary:Kerberos" blob in supplementalCredentials

If this is missing a w2k8r2 server will reboot, when someone tries to
change a password.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Jan 16 17:10:07 CET 2012 on sn-devel-104

8 years agos3:selftest: rpcclient doesn't support smb2
Stefan Metzmacher [Sat, 14 Jan 2012 10:17:33 +0000 (11:17 +0100)]
s3:selftest: rpcclient doesn't support smb2

metze

8 years agos3: ADS support is needed for dns updates
Volker Lendecke [Sat, 14 Jan 2012 12:47:08 +0000 (13:47 +0100)]
s3: ADS support is needed for dns updates

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Sat Jan 14 15:32:15 CET 2012 on sn-devel-104

8 years agoKCC importldif/exportldif and intersite topology
Dave Craft [Wed, 11 Jan 2012 14:11:35 +0000 (08:11 -0600)]
KCC importldif/exportldif and intersite topology

Add options for extracting an LDIF file from a database
and reimporting the LDIF into a schema-less database for
subsequent topology test/debug.  Add intersite topology
generation with computation of ISTG and bridgehead servers

Signed-off-by: Andrew Tridgell <tridge@samba.org>
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Jan 14 07:45:11 CET 2012 on sn-devel-104

8 years agoIntersite KCC flags for python
Dave Craft [Wed, 11 Jan 2012 14:10:27 +0000 (08:10 -0600)]
Intersite KCC flags for python

Add NTDSSITELINK options to dsdb class for use
in python samba_kcc

Signed-off-by: Andrew Tridgell <tridge@samba.org>
8 years agoIntersite KCC flags
Dave Craft [Wed, 11 Jan 2012 14:08:52 +0000 (08:08 -0600)]
Intersite KCC flags

NTDSSITELINK option flags added

Signed-off-by: Andrew Tridgell <tridge@samba.org>
8 years agoidl: add to_null property
David Disseldorp [Fri, 13 Jan 2012 21:51:22 +0000 (13:51 -0800)]
idl: add to_null property

to_null specifies that character conversion should only occur until the
null pointer in an array based string.

Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Sat Jan 14 00:51:54 CET 2012 on sn-devel-104

8 years agoidl: add to_null attribute to the spoolss devicename array
David Disseldorp [Wed, 23 Nov 2011 01:03:48 +0000 (02:03 +0100)]
idl: add to_null attribute to the spoolss devicename array

OpenPrinterEx requests have also been observed in the wild carrying
non-utf16 garbage after the device mode devicename field null
terminator.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agoidl: add to_null attribute to the spoolss formname array
David Disseldorp [Sun, 13 Nov 2011 19:40:56 +0000 (20:40 +0100)]
idl: add to_null attribute to the spoolss formname array

OpenPrinterEx requests have been observed in the wild carrying a device
mode formname "A4" followed by non-utf16 garbage after the null
terminator. Such requests currently fail during unmarshalling in the
ndr_pull_charset() codepath, causing intermittent print job failures.

This change ensures that garbage after the device mode formname null
terminator is not processed in unmarshalling.

https://bugzilla.samba.org/show_bug.cgi?id=8606

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agondr: add ndr_pull_charset_to_null()
David Disseldorp [Sun, 13 Nov 2011 19:01:43 +0000 (20:01 +0100)]
ndr: add ndr_pull_charset_to_null()

The same as ndr_pull_charset(), however only perform character
conversion on bytes prior to and including the null terminator.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agoidl: add parser for the to_null property
David Disseldorp [Sun, 13 Nov 2011 19:39:58 +0000 (20:39 +0100)]
idl: add parser for the to_null property

Compile into a ndr_pull_charset_to_null call.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos4-smbtorture: tweak spoolss_OpenPrinterEx devmode
David Disseldorp [Tue, 15 Nov 2011 17:08:43 +0000 (18:08 +0100)]
s4-smbtorture: tweak spoolss_OpenPrinterEx devmode

Flip some bits after the null terminator in the spoolss device mode
character arrays to trigger bug 8606.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos3: Fix the talloc hierarchy in fetch_share_mode_unlocked
Volker Lendecke [Wed, 11 Jan 2012 18:51:53 +0000 (19:51 +0100)]
s3: Fix the talloc hierarchy in fetch_share_mode_unlocked

Thanks, metze for noticing!

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri Jan 13 13:16:44 CET 2012 on sn-devel-104

8 years agos3-waf: check for KRB5_PDU_NONE as in the autoconf build.
Günther Deschner [Thu, 12 Jan 2012 15:29:39 +0000 (16:29 +0100)]
s3-waf: check for KRB5_PDU_NONE as in the autoconf build.

Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Fri Jan 13 11:15:35 CET 2012 on sn-devel-104

8 years agos3-autoconf: fix the build of the pdb_ldap shared module in autoconf build as well.
Günther Deschner [Thu, 12 Jan 2012 14:08:34 +0000 (15:08 +0100)]
s3-autoconf: fix the build of the pdb_ldap shared module in autoconf build as well.

Guenther

8 years agos3-waf: fix compile of pdb_ldap as shared module by moving ldap schema helpers to...
Günther Deschner [Thu, 12 Jan 2012 14:06:25 +0000 (15:06 +0100)]
s3-waf: fix compile of pdb_ldap as shared module by moving ldap schema helpers to libpdb.so

These helpers are used in other parts of Samba as well (like in idmap and in the
net provision code).

Guenther

8 years agos3-waf: also check for gsskrb5_extract_authz_data_from_sec_context() during
Günther Deschner [Thu, 12 Jan 2012 13:27:10 +0000 (14:27 +0100)]
s3-waf: also check for gsskrb5_extract_authz_data_from_sec_context() during
configure.

Guenther

8 years agos3:build: add auth/gensec/spnego.o
Stefan Metzmacher [Thu, 12 Jan 2012 14:42:08 +0000 (15:42 +0100)]
s3:build: add auth/gensec/spnego.o

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Fri Jan 13 06:32:30 CET 2012 on sn-devel-104

8 years agoauth/gensec: move spnego.c to the toplevel
Stefan Metzmacher [Thu, 12 Jan 2012 11:21:21 +0000 (12:21 +0100)]
auth/gensec: move spnego.c to the toplevel

metze

8 years agoauth/gensec: common helper functions should be in gensec_util.c
Stefan Metzmacher [Thu, 12 Jan 2012 21:03:07 +0000 (22:03 +0100)]
auth/gensec: common helper functions should be in gensec_util.c

This makes the dependencies easier to handle.

metze

8 years agos4:auth/gensec: inline packet_full_request_u32()
Stefan Metzmacher [Thu, 12 Jan 2012 21:56:03 +0000 (22:56 +0100)]
s4:auth/gensec: inline packet_full_request_u32()

This removes the dependency to s4 specific code.

metze

8 years agoauth/gensec: add some more functions from gensec_start.c to gensec.h
Stefan Metzmacher [Thu, 12 Jan 2012 15:18:38 +0000 (16:18 +0100)]
auth/gensec: add some more functions from gensec_start.c to gensec.h

metze

8 years agoauth/gensec: make sure functions from gensec.c are in gensec.h
Stefan Metzmacher [Thu, 12 Jan 2012 15:18:38 +0000 (16:18 +0100)]
auth/gensec: make sure functions from gensec.c are in gensec.h

metze

8 years agos4:auth/gensec: fix compiler warnings in spnego.c
Stefan Metzmacher [Thu, 12 Jan 2012 16:07:41 +0000 (17:07 +0100)]
s4:auth/gensec: fix compiler warnings in spnego.c

metze

8 years agos3-selftest The krb5 encrypted CIFS test was wrong
Andrew Bartlett [Fri, 13 Jan 2012 01:42:43 +0000 (12:42 +1100)]
s3-selftest The krb5 encrypted CIFS test was wrong

Sadly this fails in the test environement for now.  It needs a /etc/krb5.keytab
which we do not provide.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Jan 13 04:57:22 CET 2012 on sn-devel-104

8 years agoselftest: Do not run symbol check if setting up testenv
Amitay Isaacs [Thu, 12 Jan 2012 04:34:16 +0000 (15:34 +1100)]
selftest: Do not run symbol check if setting up testenv

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Fri Jan 13 03:11:20 CET 2012 on sn-devel-104

8 years agoAdd comments to all functions (to help me understand it better).
Jeremy Allison [Thu, 12 Jan 2012 22:46:45 +0000 (14:46 -0800)]
Add comments to all functions (to help me understand it better).

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri Jan 13 01:35:03 CET 2012 on sn-devel-104

8 years agos3: Fix nested get_share_mode_lock calls
Volker Lendecke [Tue, 10 Jan 2012 16:07:29 +0000 (17:07 +0100)]
s3: Fix nested get_share_mode_lock calls

This forces us to only do one real get_share_mode_lock call and
share the data between the nested get_share_mode_lock calls.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos3: Move the share_mode_lock handling to its own file
Volker Lendecke [Tue, 10 Jan 2012 13:13:49 +0000 (14:13 +0100)]
s3: Move the share_mode_lock handling to its own file

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos3: Put an indirection layer into share_mode_lock
Volker Lendecke [Tue, 10 Jan 2012 12:56:37 +0000 (13:56 +0100)]
s3: Put an indirection layer into share_mode_lock

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos3: Introduce get_share_mode_lock_fresh()
Volker Lendecke [Mon, 9 Jan 2012 13:30:53 +0000 (14:30 +0100)]
s3: Introduce get_share_mode_lock_fresh()

This slightly simplifies the code path for all callers which assume
that a share mode exists already. Only the callers in open_file_ntcreate
and open_directory will ever create new share modes.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos3: Replace fill_share_mode_lock()
Volker Lendecke [Mon, 9 Jan 2012 13:09:28 +0000 (14:09 +0100)]
s3: Replace fill_share_mode_lock()

This replaces fill_share_mode_lock() with the two routines
fresh_share_mode_lock() and parse_share_modes(). This lifts the
decision whether a share mode already existed on level up.

Signed-off-by: Jeremy Allison <jra@samba.org>
8 years agos4:repl_cleartext_pwd.py: add optional 'clear_utf16_name' parameter
Stefan Metzmacher [Tue, 10 Jan 2012 14:14:08 +0000 (15:14 +0100)]
s4:repl_cleartext_pwd.py: add optional 'clear_utf16_name' parameter

Not all cleartext password (machine passwords) can be converted to utf8,
let's export the raw uint16_t array.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 12 23:58:12 CET 2012 on sn-devel-104

8 years agos4:repl_cleartext_pwd.py: add 'attmode' parameter to convert the attname to utf8
Stefan Metzmacher [Tue, 10 Jan 2012 14:15:19 +0000 (15:15 +0100)]
s4:repl_cleartext_pwd.py: add 'attmode' parameter to convert the attname to utf8

metze

8 years agos4:repl_cleartext_pwd.py: correctly compare attids as uint32_t values
Stefan Metzmacher [Tue, 10 Jan 2012 14:12:00 +0000 (15:12 +0100)]
s4:repl_cleartext_pwd.py: correctly compare attids as uint32_t values

metze

8 years agos3-waf: auth_netlogond depends on tldap.
Andreas Schneider [Thu, 12 Jan 2012 13:50:40 +0000 (14:50 +0100)]
s3-waf: auth_netlogond depends on tldap.

Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Thu Jan 12 17:33:10 CET 2012 on sn-devel-104

8 years agos3-waf: link SECRETS3 only against samba3util.
Andreas Schneider [Thu, 12 Jan 2012 12:39:39 +0000 (13:39 +0100)]
s3-waf: link SECRETS3 only against samba3util.

8 years agos3-waf: Create a smaller samba3util subsystem.
Andreas Schneider [Thu, 12 Jan 2012 12:39:17 +0000 (13:39 +0100)]
s3-waf: Create a smaller samba3util subsystem.

8 years agos4:pygensec/tests: add test for gensec_set_max_update_size()
Stefan Metzmacher [Wed, 11 Jan 2012 15:00:59 +0000 (16:00 +0100)]
s4:pygensec/tests: add test for gensec_set_max_update_size()

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 12 14:47:05 CET 2012 on sn-devel-104

8 years agos4:auth/gensec/spnego: add support for fragmented spnego messages
Stefan Metzmacher [Fri, 23 Dec 2011 23:27:45 +0000 (00:27 +0100)]
s4:auth/gensec/spnego: add support for fragmented spnego messages

metze

8 years agos4:pygensec: add set_max_update_size() and max_update_size() functions
Stefan Metzmacher [Wed, 11 Jan 2012 13:53:52 +0000 (14:53 +0100)]
s4:pygensec: add set_max_update_size() and max_update_size() functions

metze

8 years agoauth/gensec: add gensec_*max_update_size()
Stefan Metzmacher [Sat, 24 Dec 2011 00:14:26 +0000 (01:14 +0100)]
auth/gensec: add gensec_*max_update_size()

This is only a hint for the backend, which may want to fragment
update tokens.

metze

8 years agos3: Split a line with 1 statements
Volker Lendecke [Thu, 12 Jan 2012 10:36:02 +0000 (11:36 +0100)]
s3: Split a line with 1 statements

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu Jan 12 13:10:19 CET 2012 on sn-devel-104

8 years agos3:smbd: explicitly ask for GENSEC_FEATURE_UNIX_TOKEN
Stefan Metzmacher [Wed, 11 Jan 2012 21:25:38 +0000 (22:25 +0100)]
s3:smbd: explicitly ask for GENSEC_FEATURE_UNIX_TOKEN

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 12 11:22:53 CET 2012 on sn-devel-104

8 years agoRevert "make paranoia check less paranoid" - check that key types strictly match
Andrew Bartlett [Thu, 15 Dec 2011 01:29:01 +0000 (12:29 +1100)]
Revert "make paranoia check less paranoid" - check that key types strictly match

This reverts commit c25af51232616061bb08eea86aae595b4f029490 because
otherwise we could attempt to check a CKSUMTYPE_HMAC_SHA1_96_AES_256 key with a
KRB5_ENCTYPE_ARCFOUR_HMAC_MD5 key.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu Jan 12 09:43:07 CET 2012 on sn-devel-104

8 years agomake hmac-md5 the keyed checksum type for arcfour-hmac-md5
Andrew Bartlett [Thu, 15 Dec 2011 05:36:03 +0000 (16:36 +1100)]
make hmac-md5 the keyed checksum type for arcfour-hmac-md5

8 years agouse ETYPE_DES3_CBC_SHA1 for the verify step in verify_mic_des3
Andrew Bartlett [Thu, 15 Dec 2011 05:17:09 +0000 (16:17 +1100)]
use ETYPE_DES3_CBC_SHA1 for the verify step in verify_mic_des3

This allows a strict link between checksum types and key types to be
enforced.

Andrew Bartlett

8 years agoheimdal: remove checking of KDC PAC signature, delegate to wdc plugin
Andrew Bartlett [Wed, 11 Jan 2012 07:19:14 +0000 (18:19 +1100)]
heimdal: remove checking of KDC PAC signature, delegate to wdc plugin

The checking of the KDC signature is more complex than it looks, it may be of a different
enc type to that which the ticket is encrypted with, and may even be prefixed
with the RODC number.

This is better handled in the plugin which can easily look up the DB for the
correct key to verify this with, and can also quickly determine if this is
an interdomain trust, which we cannot verify the PAC for.

Andrew Bartlett

8 years agoauth/kerberos: Remove unused TALLOC_CTX argument to check_pac_checksum
Andrew Bartlett [Wed, 11 Jan 2012 07:07:41 +0000 (18:07 +1100)]
auth/kerberos: Remove unused TALLOC_CTX argument to check_pac_checksum

8 years agos4-kdc Do the KDC PAC checksum validation in the Samba plugin
Andrew Bartlett [Wed, 11 Jan 2012 07:06:55 +0000 (18:06 +1100)]
s4-kdc Do the KDC PAC checksum validation in the Samba plugin

Here we can fetch the right key, and check if the PAC is likely to be signed by a key that
we know.  We cannot check the KDC signature on incoming trusts.

Andrew Bartlett

8 years agos4-kdc: use IDL constant NETLOGON_GENERIC_KRB5_PAC_VALIDATE
Andrew Bartlett [Wed, 11 Jan 2012 05:13:37 +0000 (16:13 +1100)]
s4-kdc: use IDL constant NETLOGON_GENERIC_KRB5_PAC_VALIDATE

8 years agosamba-tool:dns: DNS names are case insensitive
Amitay Isaacs [Thu, 12 Jan 2012 04:11:12 +0000 (15:11 +1100)]
samba-tool:dns: DNS names are case insensitive

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Thu Jan 12 06:43:01 CET 2012 on sn-devel-104

8 years agos4-rpc:dnsserver: DNS names are case insensitive
Amitay Isaacs [Thu, 12 Jan 2012 04:10:42 +0000 (15:10 +1100)]
s4-rpc:dnsserver: DNS names are case insensitive

8 years agoEnsure we always free aio_ex on all error paths by moving the TALLOC_FREE
Jeremy Allison [Thu, 12 Jan 2012 00:37:48 +0000 (16:37 -0800)]
Ensure we always free aio_ex on all error paths by moving the TALLOC_FREE
call out of smbd_aio_complete_aio_ex() and into the caller.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Jan 12 03:10:52 CET 2012 on sn-devel-104

8 years agoSecond part of fix for bug #8673 - NT ACL issue.
Jeremy Allison [Tue, 10 Jan 2012 20:58:13 +0000 (12:58 -0800)]
Second part of fix for bug #8673 - NT ACL issue.

Ensure we process the entire ACE list instead of returning ACCESS_DENIED
and terminating the walk - ensure we only return the exact bits that cause
the access to be denied. Some of the S3 fileserver needs to know if we
are only denied DELETE access before overriding it by looking at the
containing directory ACL.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Jan 11 19:24:53 CET 2012 on sn-devel-104

8 years agoFirst part of fix for bug #8673 - NT ACL issue.
Jeremy Allison [Tue, 10 Jan 2012 20:52:01 +0000 (12:52 -0800)]
First part of fix for bug #8673 - NT ACL issue.

Simplify the logic in the unlink/rmdir calls - makes it readable
(and correct).

8 years agolib/param: avoid talloc_reference() in copy_service()
Stefan Metzmacher [Wed, 11 Jan 2012 12:47:08 +0000 (13:47 +0100)]
lib/param: avoid talloc_reference() in copy_service()

The memory reduction compared of talloc_reference() over talloc_strdup()
is typically very low. As the strings are typically short compared
to the talloc header overhead.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 11 16:13:50 CET 2012 on sn-devel-104

8 years agos3-rpcclient: add deldriverex flags argument
David Disseldorp [Wed, 11 Jan 2012 11:29:58 +0000 (12:29 +0100)]
s3-rpcclient: add deldriverex flags argument

The spoolss DeletePrinterDriverEx command offers three flags for
controlling how associated files and other versions of the driver are
effected: DPD_DELETE_UNUSED_FILES (1), DPD_DELETE_SPECIFIC_VERSION (2)
and DPD_DELETE_ALL_FILES (4).

This commit adds an optional numeric flags argument to the rpcclient
deldriverex command.

Signed-off-by: David Disseldorp <ddiss@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
Autobuild-User: David Disseldorp <ddiss@samba.org>
Autobuild-Date: Wed Jan 11 14:39:35 CET 2012 on sn-devel-104

8 years agospoolss: fix DPD_DELETE_ALL_FILES error return
David Disseldorp [Tue, 10 Jan 2012 17:21:42 +0000 (18:21 +0100)]
spoolss: fix DPD_DELETE_ALL_FILES error return

If DeletePrinterDriverEx is called with DPD_DELETE_ALL_FILES and files
assigned to the to-be-deleted driver overlap with other drivers then an
error is returned. Change the error code here to match Windows 2k8r2.

Signed-off-by: David Disseldorp <ddiss@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
8 years agos4:auth: Make sure to check the optional auth_context hooks before using them
Andrew Bartlett [Wed, 11 Jan 2012 08:00:34 +0000 (19:00 +1100)]
s4:auth: Make sure to check the optional auth_context hooks before using them

These are optional to supply - some callers only provide an auth_context for the
other plugin functions, and so we need to deal with this cleanly.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 11 10:49:13 CET 2012 on sn-devel-104

8 years agogensec: Make sure to check the optional auth_context hooks before using them
Andrew Bartlett [Wed, 11 Jan 2012 08:00:34 +0000 (19:00 +1100)]
gensec: Make sure to check the optional auth_context hooks before using them

These are optional to supply - some callers only provide an auth_context for the
other plugin functions, and so we need to deal with this cleanly.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agogensec: Rename want_flags and got_flags in gensec_gssapi
Andrew Bartlett [Wed, 11 Jan 2012 00:26:31 +0000 (11:26 +1100)]
gensec: Rename want_flags and got_flags in gensec_gssapi

This make it clearer what type of flags these are.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agogensec: make gensec_gssapi.h common
Andrew Bartlett [Wed, 11 Jan 2012 00:14:54 +0000 (11:14 +1100)]
gensec: make gensec_gssapi.h common

This will make it easier to share elements of the GSSAPI gensec mechs,
in much the same way elements of the NTLMSSP mech are shared.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc Supply target service and server to spnego_generic_init_client()
Andrew Bartlett [Mon, 2 Jan 2012 04:21:05 +0000 (15:21 +1100)]
s3-librpc Supply target service and server to spnego_generic_init_client()

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc: Rename spnego_ntlmssp_init_client and make generic
Andrew Bartlett [Mon, 2 Jan 2012 03:29:51 +0000 (14:29 +1100)]
s3-librpc: Rename spnego_ntlmssp_init_client and make generic

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-libsmb: split out auth_generic client functions into auth_generic.c
Andrew Bartlett [Thu, 5 Jan 2012 16:15:14 +0000 (17:15 +0100)]
s3-libsmb: split out auth_generic client functions into auth_generic.c

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc: rename get_ntlmssp_auth_footer to be more generic
Andrew Bartlett [Mon, 2 Jan 2012 02:11:38 +0000 (13:11 +1100)]
s3-librpc: rename get_ntlmssp_auth_footer to be more generic

This can handle any gensec auth type now.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc Set target service and server into gensec
Andrew Bartlett [Mon, 2 Jan 2012 02:00:44 +0000 (13:00 +1100)]
s3-librpc Set target service and server into gensec

This will allow cli_rpc_pipe_open_generic_auth() to handle kerberos mechanisms.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc Rename and rework cli_rpc_pipe_open_ntlmssp() to be generic
Andrew Bartlett [Mon, 2 Jan 2012 01:51:06 +0000 (12:51 +1100)]
s3-librpc Rename and rework cli_rpc_pipe_open_ntlmssp() to be generic

This also includes renaming the helper function
rpccli_ntlmssp_bind_data, and allows this function to operate on any
gensec-supplied auth type.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc Rename create_ntlmssp_auth_rpc_bind_req() to be more generic
Andrew Bartlett [Sat, 31 Dec 2011 12:08:25 +0000 (23:08 +1100)]
s3-librpc Rename create_ntlmssp_auth_rpc_bind_req() to be more generic

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agogensec: move gensec_util.c to the top level
Andrew Bartlett [Sat, 31 Dec 2011 11:24:44 +0000 (22:24 +1100)]
gensec: move gensec_util.c to the top level

To do this some defines need to move to common_auth.h

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agoauth: make auth4_context common to provide access to generate_session_info_pac()
Andrew Bartlett [Sat, 31 Dec 2011 11:45:51 +0000 (22:45 +1100)]
auth: make auth4_context common to provide access to generate_session_info_pac()

By providing this context, a function pointer for
generate_session_info_pac() can be inserted into gensec, allowing the
s3 PAC processing in an otherwise more generic gensec module.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agoauth/kerberos: Remove unused headers from gssapi_parse.c
Andrew Bartlett [Sat, 31 Dec 2011 11:24:07 +0000 (22:24 +1100)]
auth/kerberos: Remove unused headers from gssapi_parse.c

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agos3-librpc Return user principal name on supplied mem_ctx
Andrew Bartlett [Wed, 28 Dec 2011 11:54:23 +0000 (22:54 +1100)]
s3-librpc Return user principal name on supplied mem_ctx

Signed-off-by: Stefan Metzmacher <metze@samba.org>
8 years agokrb5: Require gss_get_name_attribute or Heimdal's PAC parsing to build with krb5
Andrew Bartlett [Fri, 6 Jan 2012 07:32:41 +0000 (18:32 +1100)]
krb5: Require gss_get_name_attribute or Heimdal's PAC parsing to build with krb5

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Jan 10 23:23:07 CET 2012 on sn-devel-104

8 years agokrb5: Require krb5_string_to_key be available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:39:14 +0000 (11:39 +1100)]
krb5: Require krb5_string_to_key be available to build with krb5

8 years agokrb5: Require krb5_set_real_time is available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:34:12 +0000 (11:34 +1100)]
krb5: Require krb5_set_real_time is available to build with krb5

8 years agokrb5: Require krb5_principal_compare_any_realm be available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:30:22 +0000 (11:30 +1100)]
krb5: Require krb5_principal_compare_any_realm be available to build with krb5

8 years agokrb5: Require krb5_get_renewed_creds be available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:16:24 +0000 (11:16 +1100)]
krb5: Require krb5_get_renewed_creds be available to build with krb5

8 years agokrb5: Remove now unused checks for krb5_verify_checksum
Andrew Bartlett [Thu, 5 Jan 2012 00:09:46 +0000 (11:09 +1100)]
krb5: Remove now unused checks for krb5_verify_checksum

8 years agokrb5: Require krb5_get_init_creds_opt_alloc/free for build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:06:28 +0000 (11:06 +1100)]
krb5: Require krb5_get_init_creds_opt_alloc/free for build with krb5

This also assumes the modern API with a krb5_context argument.

Andrew Bartlett

8 years agokrb5: Require krb5_fwd_tgt_creds to be available to build with krb5
Andrew Bartlett [Wed, 4 Jan 2012 23:59:44 +0000 (10:59 +1100)]
krb5: Require krb5_fwd_tgt_creds to be available to build with krb5

8 years agokrb5: Require krb5_get_host_realm and krb5_free_host_realm be available to build...
Andrew Bartlett [Wed, 4 Jan 2012 23:54:50 +0000 (10:54 +1100)]
krb5: Require krb5_get_host_realm and krb5_free_host_realm be available to build with krb5

8 years agokrb5: Require krb5_c_verify_checksum is available to build with krb5
Andrew Bartlett [Wed, 4 Jan 2012 23:51:29 +0000 (10:51 +1100)]
krb5: Require krb5_c_verify_checksum is available to build with krb5

8 years agokrb5: Require krb5_c_enctype_compare is available to build with krb5
Andrew Bartlett [Wed, 4 Jan 2012 23:46:24 +0000 (10:46 +1100)]
krb5: Require krb5_c_enctype_compare is available to build with krb5

8 years agos4:provision: add "+dns" to server services if the dns backend is SAMBA_INTERNAL
Michael Adam [Sun, 8 Jan 2012 00:02:58 +0000 (01:02 +0100)]
s4:provision: add "+dns" to server services if the dns backend is SAMBA_INTERNAL

Signed-off-by: Kai Blin <kai@samba.org>
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Jan 10 21:17:45 CET 2012 on sn-devel-104

8 years agos4:provision: add a server services line to the smb.conf template for the dc
Michael Adam [Wed, 4 Jan 2012 23:45:12 +0000 (00:45 +0100)]
s4:provision: add a server services line to the smb.conf template for the dc

Signed-off-by: Kai Blin <kai@samba.org>
8 years agos4:provision: add the possibility to provision "server services" in smb.conf
Michael Adam [Wed, 4 Jan 2012 23:44:39 +0000 (00:44 +0100)]
s4:provision: add the possibility to provision "server services" in smb.conf

Signed-off-by: Kai Blin <kai@samba.org>
8 years agos4:provision: improve a message
Michael Adam [Wed, 4 Jan 2012 23:05:26 +0000 (00:05 +0100)]
s4:provision: improve a message

Signed-off-by: Kai Blin <kai@samba.org>
8 years agosamba: check for AES encryption type defines.
Günther Deschner [Thu, 15 Dec 2011 16:50:33 +0000 (17:50 +0100)]
samba: check for AES encryption type defines.

Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Tue Jan 10 15:05:38 CET 2012 on sn-devel-104

8 years agotalloc/testsuite: fix compiler warnings
Stefan Metzmacher [Wed, 4 Jan 2012 11:57:10 +0000 (12:57 +0100)]
talloc/testsuite: fix compiler warnings

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Jan 10 13:31:33 CET 2012 on sn-devel-104

8 years agos3-aio_pthread: Fix the build
Volker Lendecke [Tue, 10 Jan 2012 09:12:49 +0000 (10:12 +0100)]
s3-aio_pthread: Fix the build

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Jan 10 11:54:01 CET 2012 on sn-devel-104