Andrew Bartlett [Thu, 28 May 2009 22:35:59 +0000 (08:35 +1000)]
s4:torture Don't run QueryDisplayInfo test for SAMR-USERS-PRIVILEGES
Andrew Bartlett [Thu, 28 May 2009 22:35:41 +0000 (08:35 +1000)]
s4:torture Clean up users and groups added in RPC-SAMR-LARGE-DC
Andrew Bartlett [Thu, 28 May 2009 04:49:29 +0000 (14:49 +1000)]
s4:torture Half the repeditive tests run by RPC-SAMR-PASSWORDS-PWDLASTSET
Andrew Bartlett [Thu, 28 May 2009 04:13:11 +0000 (14:13 +1000)]
Explicitly list RPC-SAMR-PASSWORDS-PWDLASTSET and RPC-SAMR-USERS-PRIVILAGES as slow
Andrew Bartlett [Thu, 28 May 2009 01:44:44 +0000 (11:44 +1000)]
s4:client Match Samba3 and remove smbmount from the distribution
Andrew Bartlett [Thu, 28 May 2009 00:42:28 +0000 (10:42 +1000)]
s4:torture Make the RPC-SAMR-PWDLASTET more efficient
By using SamLogonEx we avoid setting up the credentials chain for each
request.
(Needs to be pushed further up the stack, to only connect to NETLOGON once).
Andrew Bartlett
Andrew Bartlett [Fri, 29 May 2009 00:34:00 +0000 (10:34 +1000)]
Fix incorrect RID for KRBTGT. (was incorectly 514, should be 502)
Requires recompile of source4/kdc/*
Found by Andrew Kroeger <andrew@id10ts.net>
Andrew Bartlett
Andrew Bartlett [Fri, 29 May 2009 00:34:00 +0000 (10:34 +1000)]
Fix incorrect RID for KRBTGT. (was incorectly 514, should be 502)
Requires recompile of source4/kdc/*
Found by Andrew Kroeger <andrew@id10ts.net>
Andrew Bartlett
Jeremy Allison [Thu, 28 May 2009 23:15:09 +0000 (16:15 -0700)]
Make cli_posix_chown()/cli_posix_chmod() async.
Jeremy.
Tim Prouty [Thu, 28 May 2009 21:11:43 +0000 (14:11 -0700)]
s3 onefs: update the onefs module to be compliant with stat_ex
Tim Prouty [Thu, 28 May 2009 21:11:17 +0000 (14:11 -0700)]
s3: Fix a few more users of stat to use stat_ex
Tim Prouty [Thu, 28 May 2009 20:34:28 +0000 (13:34 -0700)]
s3 tdbtorture: Fix linking issue
tdbtorture now calls the tdb transaction code and needs to link it appropriately
Jeremy Allison [Thu, 28 May 2009 20:32:00 +0000 (13:32 -0700)]
Make cli_posix_stat() async.
Jeremy.
Steven Danneman [Thu, 28 May 2009 00:14:49 +0000 (17:14 -0700)]
s3/auth map NULL domains to our global sam name
This is an addendum to
d8c54fdd, which made make_user_info_map() match
Windows behavior by mapping untrusted domains given to smbd on the wire
with the users credentials to smbd's global sam name.
This fix was being circumvented in the case where the client passed
a NULL domain. Vista clients do this. In that case smbd was always
remapping the name to the machine workgroup. The NULL domain case
should also be mapped to the global sam name.
Removing the code in this patch, causes us to fall down to the logic
added in
d8c54fdd and properly map the domain.
Jeremy Allison [Thu, 28 May 2009 20:05:50 +0000 (13:05 -0700)]
Make getfacl async.
Jeremy.
Bo Yang [Fri, 29 May 2009 08:10:19 +0000 (16:10 +0800)]
s3: fix building of pam_smbpass.
Signed-off-by: Bo Yang <boyang@samba.org>
Günther Deschner [Thu, 28 May 2009 13:32:55 +0000 (15:32 +0200)]
s3-winbindd: fix remaining callers of sid_binstring().
Guenther
Andrew Tridgell [Thu, 28 May 2009 12:12:00 +0000 (22:12 +1000)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Volker Lendecke [Thu, 28 May 2009 12:09:44 +0000 (14:09 +0200)]
Fix some nonempty blank lines
Björn Jacke [Wed, 27 May 2009 22:25:48 +0000 (00:25 +0200)]
s3:nmbd: fix typo
Günther Deschner [Thu, 28 May 2009 09:51:46 +0000 (11:51 +0200)]
nss_wrapper: fix nss_wrapper build for solaris.
Guenther
Günther Deschner [Thu, 28 May 2009 08:53:53 +0000 (10:53 +0200)]
nss_wrapper: remove re-structuring leftovers (unused variables).
Guenther
Volker Lendecke [Thu, 28 May 2009 09:18:22 +0000 (11:18 +0200)]
Make sid_binstring & friends take a talloc context
Volker Lendecke [Wed, 27 May 2009 16:40:31 +0000 (18:40 +0200)]
TALLOC_ZERO_P->talloc_zero
Volker Lendecke [Wed, 27 May 2009 16:40:13 +0000 (18:40 +0200)]
Do not segfault in pdb_search_destructor if no real search was started
Volker Lendecke [Wed, 27 May 2009 23:02:40 +0000 (01:02 +0200)]
Add smbldap_pull_sid
Günther Deschner [Thu, 28 May 2009 08:40:22 +0000 (10:40 +0200)]
s3-selftest: use nss_wrapper.pl as "add user to group" and "delete user from group" script.
Guenther
Günther Deschner [Thu, 28 May 2009 08:39:37 +0000 (10:39 +0200)]
nss_wrapper: support member add and delete for groups in nss_wrapper.pl.
Guenther
Günther Deschner [Wed, 27 May 2009 20:35:14 +0000 (22:35 +0200)]
nss_wrapper: split out passwd and group paths in nss_wrapper.pl.
Guenther
Günther Deschner [Wed, 27 May 2009 16:38:10 +0000 (18:38 +0200)]
nss_wrapper: restructure nwrap calls.
Guenther
Andrew Tridgell [Thu, 28 May 2009 07:35:12 +0000 (17:35 +1000)]
fixed tdbbackup to give tdb error messages
Andrew Tridgell [Thu, 28 May 2009 06:12:34 +0000 (16:12 +1000)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Andrew Tridgell [Thu, 28 May 2009 06:11:45 +0000 (16:11 +1000)]
a useful debugging tool
When looking at performance problems with ldb it can be useful to see
which searches causes unindexed full searches. This makes it easy to
enable that.
Andrew Tridgell [Thu, 28 May 2009 06:10:47 +0000 (16:10 +1000)]
fixed one-level indexing
one-level indexing was not always effective due to some broken logic
in the indexing code. This change means that if normal indexing fails,
we can still fall back on one-level indexing.
This reduces the number of full unindexed searches in s4 quite a lot
Andrew Tridgell [Thu, 28 May 2009 06:08:49 +0000 (16:08 +1000)]
enable one-level indexing in sam.ldb
Andrew Tridgell [Thu, 28 May 2009 06:08:28 +0000 (16:08 +1000)]
make TDB_NOSYNC affect all the fsync/msync calls in transactions
During a transaction commit tdb normally uses fsync/msync calls to
make it crash safe. This can be disabled using the TDB_NOSYNC flag,
but it wasn't disabling all the code paths that caused a fsync/msync.
Jeremy Allison [Thu, 28 May 2009 05:02:20 +0000 (22:02 -0700)]
Add a smbclient "readlink" command and add docs for it.
Jeremy.
Jeremy Allison [Thu, 28 May 2009 04:51:15 +0000 (21:51 -0700)]
Add cli_posix_readlink() and a torture test for it.
Jeremy.
Jeremy Allison [Thu, 28 May 2009 00:28:23 +0000 (17:28 -0700)]
Add aync POSIX hardlink and symlink and torture test for them.
Missing call cli_readlink() is next.
Jeremy.
Michael Adam [Wed, 27 May 2009 17:25:44 +0000 (19:25 +0200)]
s3:idmap_ldap: filter out of range mappings in default idmap config
This fixes bug #6417
Michael
Tim Prouty [Wed, 27 May 2009 19:52:37 +0000 (12:52 -0700)]
tdb: Fix some recently introduced warnings in tdbtool
Marc VanHeyningen [Tue, 5 May 2009 21:18:50 +0000 (21:18 +0000)]
s3: Allow child processes to exit gracefully if we are out of fds
When we run out of file descriptors for some reason, every new
connection forks a child that immediately panics causing smbd to
coredump. This seems unnecessarily harsh; with this code change we
now catch that error and merely log a message about it and exit
without the core dump.
Signed-off-by: Tim Prouty <tprouty@samba.org>
Marc VanHeyningen [Tue, 5 May 2009 22:07:40 +0000 (22:07 +0000)]
s3: zero an uninitialized array
Invalid pointers were being dereferenced in lookup_sids causing
occasional seg faults.
Signed-off-by: Tim Prouty <tprouty@samba.org>
Michael Adam [Wed, 27 May 2009 17:26:32 +0000 (19:26 +0200)]
s3:idmap: fix a comment typo
Michael
Michael Adam [Wed, 27 May 2009 17:24:03 +0000 (19:24 +0200)]
s3:idmap_tdb2: filter out of range mappings in default idmap config
This fixes bug #6416
Michael
Michael Adam [Wed, 27 May 2009 17:14:10 +0000 (19:14 +0200)]
s3:idmap_tdb: add an entry debug statment to idmap_tdb_db_init()
Michael
Michael Adam [Wed, 27 May 2009 17:12:28 +0000 (19:12 +0200)]
s3:idmap_tdb: filter out of range mappings in default idmap config
This fixes bug #6415
Michael
Karolin Seeger [Wed, 27 May 2009 16:14:17 +0000 (18:14 +0200)]
s3/docs: Correct version number.
Karolin
Karolin Seeger [Wed, 27 May 2009 14:04:11 +0000 (16:04 +0200)]
Revert "s3/docs: Fix build."
This reverts commit
84998cb85e59a92178d916f4e485c08fb826b838.
Actually, the "fix" breaks the build.
Works after 'make clean'. Sorry!
Karolin Seeger [Wed, 27 May 2009 13:52:23 +0000 (15:52 +0200)]
s3/docs: Fix build.
$(DBLATEX) was empty.
Please check!
Karolin
Nadezhda Ivanova [Wed, 27 May 2009 10:49:51 +0000 (13:49 +0300)]
Modified SamDB to accept options like Ldb.
Björn Jacke [Wed, 27 May 2009 10:01:21 +0000 (12:01 +0200)]
s3: update manpage as to the new passdb backend default
Björn Jacke [Mon, 25 May 2009 12:55:04 +0000 (14:55 +0200)]
s3: make passdb backend defaults to tdbsam
Volker Lendecke [Sun, 24 May 2009 20:17:58 +0000 (22:17 +0200)]
Fix the build of nfs4_acls.c
Volker Lendecke [Sun, 24 May 2009 20:16:34 +0000 (22:16 +0200)]
Fix a size_t/int warning
Volker Lendecke [Sun, 24 May 2009 19:46:53 +0000 (21:46 +0200)]
Fix some nonempty blank lines
Volker Lendecke [Wed, 27 May 2009 06:09:23 +0000 (08:09 +0200)]
Gna, how long do I program in C now??? :-)
Andrew Bartlett [Mon, 18 May 2009 05:56:31 +0000 (15:56 +1000)]
Detect missing 'witch' before detecting missing autoconf
Steven Danneman [Fri, 22 May 2009 23:57:52 +0000 (16:57 -0700)]
s3/docs Add manpage for "map untrusted to domain" parameter
This fixes bug 6352.
Andrew Bartlett [Tue, 26 May 2009 03:09:57 +0000 (13:09 +1000)]
Handle the krbtgt special case by looking for RID -514
It turns out (seen in MS-SAMR 3.1.1.7.1 for example) that the primary
way the krbtgt account is recognised as special is that RID. This
should fix issues such as 'password expired' on the kpasswd service.
Andrew Bartlett
Andrew Bartlett [Tue, 26 May 2009 04:43:49 +0000 (14:43 +1000)]
Add DOMAIN_RID_KRBTGT define to security.idl
Andrew Kroeger [Sun, 24 May 2009 06:48:49 +0000 (01:48 -0500)]
s4:tevent: Increase trace debug level to 50.
The sheer volume of messages generated by tevent when the trace level is set to
10 makes it difficult to debug issues in a level 10 log. Increasing this to
50 allows tevent tracing to be enabled if needed, but otherwise keeps the extra
chatter out of a level 10 log.
Volker Lendecke [Tue, 26 May 2009 21:37:14 +0000 (23:37 +0200)]
Attempt to fix the build on HP/UX
Volker Lendecke [Tue, 26 May 2009 20:39:50 +0000 (22:39 +0200)]
Attempt to fix the build on NetBSD
Björn Jacke [Tue, 26 May 2009 21:19:00 +0000 (23:19 +0200)]
Revert "s3: fix build on systems with struct stat member st_flags"
for a cleaner and more complete patch that Volker has in the queue :-)
Björn Jacke [Tue, 26 May 2009 20:37:17 +0000 (22:37 +0200)]
s3: fix build on systems with struct stat member st_flags
Andrew Kroeger [Sun, 24 May 2009 22:40:57 +0000 (17:40 -0500)]
s4:ldb_modules: Correct typos.
Andrew Kroeger [Tue, 26 May 2009 20:22:13 +0000 (15:22 -0500)]
s4:ldb:modules: Correct typos.
Volker Lendecke [Tue, 26 May 2009 19:07:08 +0000 (21:07 +0200)]
Fix some nonempty blank lines
Volker Lendecke [Thu, 14 May 2009 13:34:42 +0000 (15:34 +0200)]
Introduce "struct stat_ex" as a replacement for SMB_STRUCT_STAT
This patch introduces
struct stat_ex {
dev_t st_ex_dev;
ino_t st_ex_ino;
mode_t st_ex_mode;
nlink_t st_ex_nlink;
uid_t st_ex_uid;
gid_t st_ex_gid;
dev_t st_ex_rdev;
off_t st_ex_size;
struct timespec st_ex_atime;
struct timespec st_ex_mtime;
struct timespec st_ex_ctime;
struct timespec st_ex_btime; /* birthtime */
blksize_t st_ex_blksize;
blkcnt_t st_ex_blocks;
};
typedef struct stat_ex SMB_STRUCT_STAT;
It is really large because due to the friendly libc headers playing macro
tricks with fields like st_ino, so I renamed them to st_ex_xxx.
Why this change? To support birthtime, we already have quite a few #ifdef's at
places where it does not really belong. With a stat struct that we control, we
can consolidate the nanosecond timestamps and the birthtime deep in the VFS
stat calls.
At this moment it is triggered by a request to support the birthtime field for
GPFS. GPFS does not extend the system level struct stat, but instead has a
separate call that gets us the additional information beyond posix. Without
being able to do that within the VFS stat calls, that support would have to be
scattered around the main smbd code.
It will very likely break all the onefs modules, but I think the changes will
be reasonably easy to do.
Stefan Metzmacher [Tue, 26 May 2009 13:30:39 +0000 (15:30 +0200)]
s3:smbd: remove unused global 'orig_inbuf'
metze
Björn Jacke [Tue, 26 May 2009 13:40:21 +0000 (15:40 +0200)]
s3:pam_smbpass: don't call openlog() or closelog() from pam_smbpass
Patch from Steve Langasek with tiny fixes by me to make it apply to master.
Also see Debian bug #434372 and bugzilla #4831.
Calling openlog() or closelog() inside a pam module is not good as these
functions are not stackable and no program won't re-do openlog() just because a
pam module might have called closelog().
Andrew Kroeger [Mon, 25 May 2009 19:46:08 +0000 (14:46 -0500)]
gitignore: Ignore additional auto-generated files.
Corrected path to tdr_proto.h and added librpc/gen_ndr/{cli,srv}_dcerpc.[ch].
Karolin Seeger [Tue, 26 May 2009 12:16:10 +0000 (14:16 +0200)]
s3/docs: Fix typo in man idmap_rid.
Karolin
Stefan Metzmacher [Tue, 26 May 2009 08:48:12 +0000 (10:48 +0200)]
s3:smbd: move SMB1 specific stuff into a substructure of smbd_server_connection
metze
Stefan Metzmacher [Fri, 22 May 2009 20:58:39 +0000 (22:58 +0200)]
s3:smbd: add support for SMB2 signing
metze
Stefan Metzmacher [Fri, 22 May 2009 19:26:03 +0000 (21:26 +0200)]
s3:smbd: return the correct security mode and capabilities in SMB2 Negotitate
metze
Stefan Metzmacher [Tue, 26 May 2009 07:37:29 +0000 (09:37 +0200)]
s4:libcli/smb2: remove old dialect revision constants
metze
Stefan Metzmacher [Tue, 26 May 2009 06:44:27 +0000 (08:44 +0200)]
s4:smb2srv: We only support SMB 2.002.
We need to loop over all given dialects and check
if we can find SMB2_DIALECT_REVISION_202.
metze
Stefan Metzmacher [Tue, 26 May 2009 07:38:09 +0000 (09:38 +0200)]
s4:libcli/smb2: use new SMB2_DIVELECT_REVISION constants
Also send them in the order a windows client would
send them (the lowest first).
metze
Stefan Metzmacher [Fri, 22 May 2009 20:23:42 +0000 (22:23 +0200)]
s4:libcli/smb2: add some more SMB2 constants
metze
Kai Blin [Tue, 26 May 2009 07:26:56 +0000 (09:26 +0200)]
s3 WHATSNEW: Mention the changes to net
Andrew Tridgell [Tue, 26 May 2009 04:47:11 +0000 (14:47 +1000)]
use domain_dn not ncname
fixed up from previous patch that removed the use of crossref records
Andrew Tridgell [Tue, 26 May 2009 04:18:16 +0000 (14:18 +1000)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Andrew Kroeger [Sun, 24 May 2009 08:37:37 +0000 (03:37 -0500)]
s4:provision: Added ComPartitionSets entry.
Without this entry, opening the COM+ tab under the properties of an OU within
ADUC results in the following error:
"Unable to retrieve all user properties, 0x80072030"
Andrew Kroeger [Sun, 24 May 2009 19:47:46 +0000 (14:47 -0500)]
s4:Added Extended-Rights and subentries.
Without these entries, using the 'Delegate Control' option in ADUC results in
the following error message in the Delegation of Control Wizard:
"The templates could not be applied. One or more of the templates is not
applicable. Click Back and select different templates, and then try again."
Andrew Kroeger [Fri, 22 May 2009 05:28:36 +0000 (00:28 -0500)]
s4:provision: Update DisplaySpecifiers (#5139).
The classDisplayName attribute controls the actual text displayed to the user
for the top-level menus, so added it to the existing entries.
The attributeDisplayNames attribute contains both the text displayed to the
user and a mapping to the internal directory attribute name for the particular
field, so added these to the existing entries as well.
Added new entries as appropriate to properly complete all menus and labels
within ADUC.
Andrew Bartlett [Tue, 26 May 2009 02:31:39 +0000 (12:31 +1000)]
Don't use crossRef records to find our own domain
A single AD server can only host a single domain, so don't stuff about
with looking up our crossRef record in the cn=Partitions container.
We instead trust that lp_realm() and lp_workgroup() works correctly.
Andrew Bartlett
Andrew Bartlett [Tue, 26 May 2009 01:43:37 +0000 (11:43 +1000)]
Add support for sendmsg() in socket_wrapper
This is required because the deferred connect code skips the connect()
until sending the packet, but unless we catch this call, the connect()
never happens.
Andrew Bartlett
Andrew Tridgell [Mon, 25 May 2009 23:26:47 +0000 (09:26 +1000)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Andrew Tridgell [Mon, 25 May 2009 23:24:37 +0000 (09:24 +1000)]
added some more speed tests to tdbtool
This adds 3 simple speed tests to tdbtool, for transaction store,
store and fetch.
On my laptop this shows transactions costing about 10ms
Michael Adam [Mon, 25 May 2009 22:47:15 +0000 (00:47 +0200)]
s3:dbwrap_tool: add listkeys operation
Michael
Michael Adam [Mon, 25 May 2009 22:26:39 +0000 (00:26 +0200)]
s3:dbwrap_tool: remove superfluous command mapping
Michael
Michael Adam [Mon, 25 May 2009 21:27:28 +0000 (23:27 +0200)]
s3:dbwrap_tool: add "erase" opearation
Michael
Kai Blin [Thu, 14 May 2009 09:39:01 +0000 (11:39 +0200)]
net: Use samba default command line arguments.
Attention:
The meaning of the -N flag changed.
To get the old meaning for net groupmap set, use the long option --ntname
The long option for using kerberos changed from --kerberos to --use-kerberos
net rpc commands will now prompt for a password if none is given.
As a benefit, net will now accept an authentication file like other samba
command line tools. So no need to specify the password on the command line in
scripts anymore.
This should fix bug #6357
Signed-off-by: Kai Blin <kai@samba.org>
Kai Blin [Wed, 20 May 2009 10:07:07 +0000 (12:07 +0200)]
s3 ctags: ignore all proto.h files for tag generation
Michael Adam [Mon, 25 May 2009 09:55:51 +0000 (11:55 +0200)]
s3:winbind_util: remove trailing spaces
Michael
Michael Adam [Mon, 25 May 2009 19:59:40 +0000 (21:59 +0200)]
s3:dbwrap_ctdb: fix some function header comments
Michael
Slava Semushin [Fri, 22 May 2009 18:10:05 +0000 (01:10 +0700)]
source3/utils/log2pcaphex.c(main): fixed file descriptors leak.
One of leaks found by cppcheck:
[./source3/utils/log2pcaphex.c:367]: (error) Resource leak: out
Slava Semushin [Sat, 23 May 2009 13:51:53 +0000 (20:51 +0700)]
source{3,4}/torture/smbiconv.c(main): fixed file descriptor leak.
File descriptor leaks only when we use file instead of stdout.
Found by cppcheck:
[./source3/torture/smbiconv.c:219]: (error) Resource leak: out
[./source4/torture/smbiconv.c:211]: (error) Resource leak: out