Stefan Metzmacher [Mon, 1 Dec 2008 21:45:55 +0000 (13:45 -0800)]
s3:smbd: write times should be set on the base file instead of the stream name
metze
Stefan Metzmacher [Mon, 1 Dec 2008 21:35:28 +0000 (13:35 -0800)]
s3:smbd: return DELETE_PENDING on path based operations on streams, when the main file was deleted.
metze
Jeremy Allison [Mon, 1 Dec 2008 21:32:35 +0000 (13:32 -0800)]
Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
Stefan Metzmacher [Mon, 1 Dec 2008 21:31:43 +0000 (13:31 -0800)]
s3:smbd: construct the correct newname for stream renames
The Windows Explorer creates temporary streams and renames
them later via SFILEINFO_RENAME_INFO. The newname comes
in as ":Stream:$DATA".
metze
Günther Deschner [Mon, 1 Dec 2008 21:20:41 +0000 (22:20 +0100)]
s3-samr: fix various potential memleaks in samr_SetUserInfo.
Was there any reason why we did all these individual TALLOC_FREEs ?
Guenther
Stefan Metzmacher [Mon, 1 Dec 2008 21:27:47 +0000 (13:27 -0800)]
s3:smbd: wildcard characters are allowed in stream names
We only check the filename of the basefile now.
metze
Stefan Metzmacher [Mon, 1 Dec 2008 21:22:55 +0000 (13:22 -0800)]
s3:smbd: correctly verify stream names to pass RAW-STREAMS
metze
Stefan Metzmacher [Mon, 1 Dec 2008 21:01:09 +0000 (13:01 -0800)]
s3:smbd: '|' isn't allowed in windows filenames
metze
Günther Deschner [Mon, 1 Dec 2008 18:51:27 +0000 (19:51 +0100)]
s3-samr: avoid code duplication for identical code in _samr_Connect2, 4 and 5.
Guenther
Günther Deschner [Mon, 1 Dec 2008 18:50:26 +0000 (19:50 +0100)]
s3-samr: modify logging in _samr_Connect2 so that it can be called from other calls as well.
Guenther
Volker Lendecke [Mon, 1 Dec 2008 16:35:19 +0000 (17:35 +0100)]
Fix a debug message, append the correct \n
Bo Yang [Tue, 2 Dec 2008 00:37:27 +0000 (08:37 +0800)]
Fix script installmo.sh when no .po file exists
Michael Adam [Mon, 1 Dec 2008 05:20:22 +0000 (06:20 +0100)]
s3:vfs_tsmsm: fix potential segfault (freeing uninitialized buffer)
Michael
Steven Danneman [Mon, 1 Dec 2008 00:26:10 +0000 (16:26 -0800)]
Make nt4_compatible_acls() non-static for use by VFS ACL modules.
Michael Adam [Mon, 1 Dec 2008 03:22:33 +0000 (04:22 +0100)]
s3:winbindd/nss_info: remove unused variable from nss_init()
Michael
Michael Adam [Mon, 1 Dec 2008 03:22:02 +0000 (04:22 +0100)]
s3:winbindd/nss_info: make nss_domain_list_add_domain() static
Michael
Michael Adam [Mon, 1 Dec 2008 01:01:44 +0000 (02:01 +0100)]
s3:winbindd/nss_info: fix default backend handling for ad backends.
This fixes "winbind nss info = rfc2307" (or sfu or sfu20).
Originally, only explicitly configured domains (like "rfc2307:domain")
worked with the ad module, since the domain name was not passed
backe to the module. This is fixed by recording the first backend
listed without domain in the "winbind nss info" parameter as the
default backend, and creating new nss_domain entries (using this default
backend) on the fly as requests for domains which are not explicitly
configured are encountered.
Michael
Michael Adam [Sun, 30 Nov 2008 23:56:50 +0000 (00:56 +0100)]
s3:winbindd/nss_info: whitespace cleanup.
Remove trailing spaces and fix tab / space mixup.
Michael
Michael Adam [Sun, 30 Nov 2008 22:00:19 +0000 (23:00 +0100)]
s3:winbindd_cache: add debugging to get_nss_info_cached()
Michael
Michael Adam [Sun, 30 Nov 2008 21:57:41 +0000 (22:57 +0100)]
s3:winbindd/nss_info: add entry debug message to nss_get_info()
Michael
Michael Adam [Sun, 30 Nov 2008 21:54:42 +0000 (22:54 +0100)]
s3:winbindd/nss_info: add debugging to nss_init()
Michael
Michael Adam [Sun, 30 Nov 2008 21:50:26 +0000 (22:50 +0100)]
s3:winbindd/idmap_ad: add entry debug message to nss_ad_get_info()
Michael
Michael Adam [Wed, 26 Nov 2008 22:09:49 +0000 (23:09 +0100)]
s3:winbindd/idmap_ad: add support for trusted domains to idmap_ad (bug #3661)
This initial fix does at least work for explicitly configured domains.
The patch has a few disadvantages:
1. It does work only for explicitly configured domains, not with
the default backend (idmap backend = ad), since it relies on the
domain name being passed in via the idmap_domain. One workaround
for this would be to create clones of the default idmap_domain
for domains not explicitly configured.
2. It calls find_domain_from_name_noinit() from idmap_ad_cached_connection.
The problem here is that only the NetBIOS domain name (workgroup
name) is passed in via the idmap_domain struct, and the module
has to establish a connection to the domain based on that information.
find_domain_from_name_noinit() has the disadvantage that it uses the state
of the domain list at fork time (unless used from the main winbindd).
But this should be ok as long as the primary domain was reachable at
start time.
For nss_info, the situation is similar - This will only work for domains
explicitly configured in smb.conf as follows:
"winbind nss info = rfc2307:dom1 sfu:dom2 rfc2307:dom3 template:dom4"
Setting the default nss info to one of the ad backends (rfc2307, sfu, sfu20)
will fail since the domain name is not passed in with the nss_domain_entry.
Michael
Michael Adam [Wed, 26 Nov 2008 21:23:34 +0000 (22:23 +0100)]
s3:winbindd/idmap_ad: refactor core of nss_{sfu|sfu20|rfc2307}_init to common function.
Michael
Michael Adam [Wed, 26 Nov 2008 14:16:22 +0000 (15:16 +0100)]
s3:winbindd/idmap_ad: rename ctx to mem_ctx in nss_ad_get_info()
in preparation to using the idmap_ad_context there
Michael
Michael Adam [Fri, 28 Nov 2008 09:40:42 +0000 (10:40 +0100)]
s3:winbindd/idmap: add diagnostic entry debug msg to idmap_backends_sid_to_unixid
Michael
Michael Adam [Fri, 28 Nov 2008 09:40:01 +0000 (10:40 +0100)]
s3:winbindd/idmap: add diagnostic entry debug msg to idmap_backends_unixid_to_sid
Michael
Michael Adam [Fri, 28 Nov 2008 09:08:46 +0000 (10:08 +0100)]
s3:winbindd/idmap: add diagnostic entry debug msg to idmap_find_domain().
Michael
Michael Adam [Fri, 28 Nov 2008 09:05:19 +0000 (10:05 +0100)]
s3:winbindd/idmap_util: unify entering debug messages and add ouput of domain
Michael
Michael Adam [Mon, 1 Dec 2008 03:17:55 +0000 (04:17 +0100)]
s3:winbindd/nss_info: change nss_map_{to|from}_alias to take nss_domain_entry
instead of just the domain name
Michael
Steven Danneman [Sun, 30 Nov 2008 23:51:38 +0000 (15:51 -0800)]
Set PRESENT flag when returning NULL [SD]ACL like Windows does.
This could also be handled inside each ACL VFS module, by setting the PRESENT
flag when a NULL [SD]ACL is created.
Volker Lendecke [Sun, 30 Nov 2008 11:54:32 +0000 (12:54 +0100)]
remove the explicit mem_ctx from ntlmssp_state, use the state itself
Volker Lendecke [Sun, 30 Nov 2008 11:43:12 +0000 (12:43 +0100)]
fix nonempty blank lines
Volker Lendecke [Sun, 30 Nov 2008 11:30:00 +0000 (12:30 +0100)]
Do not build the session request if it si not used anyway
Volker Lendecke [Sun, 30 Nov 2008 11:25:17 +0000 (12:25 +0100)]
fix nonempty blank lines
Günther Deschner [Fri, 28 Nov 2008 23:12:26 +0000 (00:12 +0100)]
s3-libnetjoin: Fix bug #5749. Re-set acctflags while joining. fix from metze.
Guenther
Günther Deschner [Fri, 28 Nov 2008 23:10:18 +0000 (00:10 +0100)]
s3-libnetjoin: remove unused md4_trust_password, found by metze.
Guenther
Günther Deschner [Fri, 28 Nov 2008 21:01:18 +0000 (22:01 +0100)]
s4-smbtorture: add some more testcases to pwdlastset test.
Guenther
Günther Deschner [Fri, 28 Nov 2008 20:58:25 +0000 (21:58 +0100)]
s4-smbtorture: fix RPC-SAMR-PASSWORDS-PWDLASTSET with samba3 option.
Guenther
Günther Deschner [Fri, 28 Nov 2008 10:15:29 +0000 (11:15 +0100)]
s3-samr: add init_samr_user_info25 and init_samr_user_info26.
Guenther
Günther Deschner [Thu, 27 Nov 2008 16:25:13 +0000 (17:25 +0100)]
selftest: s4 does not have a pwdlastset implementation yet.
Guenther
Günther Deschner [Fri, 28 Nov 2008 11:10:56 +0000 (12:10 +0100)]
s4-smbtorture: allow to disable full testing of all possible opcode combinations.
Guenther
Günther Deschner [Thu, 27 Nov 2008 11:09:39 +0000 (12:09 +0100)]
s4-smbtorture: move test to SAMR-PASSWORDS-PWDLASTSET.
Guenther
Günther Deschner [Tue, 25 Nov 2008 01:46:25 +0000 (02:46 +0100)]
s4-smbtorture: add test for samr password_expired flag while setting passwords.
Guenther
Günther Deschner [Fri, 28 Nov 2008 11:04:09 +0000 (12:04 +0100)]
s4-smbtorture: add test_SetUserPass_level_ex.
Guenther
Günther Deschner [Fri, 28 Nov 2008 00:56:09 +0000 (01:56 +0100)]
s4-smbtorture: add samr_rand_pass_silent.
Guenther
Günther Deschner [Thu, 27 Nov 2008 16:45:01 +0000 (17:45 +0100)]
s4-samr: fix samr passwdord_expired callers.
Guenther
Günther Deschner [Mon, 24 Nov 2008 17:49:37 +0000 (18:49 +0100)]
s3-samr: fix init_samr_user_info{23,24} callers.
Guenther
Günther Deschner [Mon, 24 Nov 2008 15:32:18 +0000 (16:32 +0100)]
s3-build: re-run make samba3-idl.
Guenther
Günther Deschner [Mon, 24 Nov 2008 15:31:49 +0000 (16:31 +0100)]
samr: fix samr_UserInfo24 and samr_UserInfo26.
Guenther
Volker Lendecke [Sun, 9 Nov 2008 16:25:40 +0000 (17:25 +0100)]
Remove "conn" parameter from np_open, smb_request contains it
Volker Lendecke [Sun, 9 Nov 2008 11:07:57 +0000 (12:07 +0100)]
Remove inbuf references from the trans2ioctl code
Volker Lendecke [Sat, 8 Nov 2008 16:08:57 +0000 (17:08 +0100)]
Consolidate the buffer checks for the reply_trans style functions
This is the one where I found the problem that led to 3.2.5. So if there is one
checkin in the last year that I would like others to review and *understand*,
it is this one :-)
Volker
Volker Lendecke [Sat, 8 Nov 2008 15:48:20 +0000 (16:48 +0100)]
Move cli_trans_oob to lib/util.c
Rename it to trans_oob, it will be used in the server routines.
Volker Lendecke [Sat, 8 Nov 2008 15:14:12 +0000 (16:14 +0100)]
Remove the variable "size" from reply_nttrans
This converts the range checks for the setup[] array to rely on req->wct being
set correctly in init_smb_request. As that already verifies the vwv array to be
in the range of the smb_request inbuf, we don't have to do overflow checks here
anymore.
Jeremy, please check thoroughly! :-)
Thanks,
Volker
Volker Lendecke [Sat, 8 Nov 2008 15:14:12 +0000 (16:14 +0100)]
Remove the variable "size" from reply_trans
This converts the range checks for the setup[] array to rely on req->wct being
set correctly in init_smb_request. As that already verifies the vwv array to be
in the range of the smb_request inbuf, we don't have to do overflow checks here
anymore.
Jeremy, please check thoroughly! :-)
Thanks,
Volker
Volker Lendecke [Sat, 8 Nov 2008 15:03:07 +0000 (16:03 +0100)]
Remove an unused variable
Volker Lendecke [Sat, 8 Nov 2008 14:44:20 +0000 (15:44 +0100)]
Remove two direct inbuf references from reply_sesssetup_and_X_spnego()
Günther Deschner [Thu, 27 Nov 2008 16:29:30 +0000 (17:29 +0100)]
s3-samr: never allow to alter pwdlastset directly.
Guenther
Günther Deschner [Thu, 27 Nov 2008 00:25:46 +0000 (01:25 +0100)]
s3-samr: fix return code for invalid password sets in SetUserInfo.
Guenther
Günther Deschner [Thu, 27 Nov 2008 00:22:39 +0000 (01:22 +0100)]
s3-samr: fix return code for invalid name in _samr_LookupDomain.
Guenther
Günther Deschner [Thu, 27 Nov 2008 00:21:49 +0000 (01:21 +0100)]
s3-samr: avoid enumeration and user creation on builtin domain handle.
Guenther
Günther Deschner [Tue, 25 Nov 2008 14:51:35 +0000 (15:51 +0100)]
s3-samr: support samr_CreateUser as well.
Guenther
Günther Deschner [Tue, 25 Nov 2008 14:50:28 +0000 (15:50 +0100)]
s3-samr: support samr_QueryUserInfo2 as well.
Guenther
Günther Deschner [Tue, 25 Nov 2008 11:21:37 +0000 (12:21 +0100)]
s3-samr: add support for _samr_QueryUserInfo level 5.
Guenther
Günther Deschner [Tue, 25 Nov 2008 11:18:39 +0000 (12:18 +0100)]
s3-samr: add init_samr_user_info5.
Guenther
Günther Deschner [Thu, 27 Nov 2008 08:44:51 +0000 (09:44 +0100)]
s4-smbtorture: fix some build warnings.
Guenther
Volker Lendecke [Sat, 8 Nov 2008 16:14:06 +0000 (17:14 +0100)]
Fix the offset checks in the trans routines
This fixes a potential crash bug, a client can make us read memory we
should not read. Luckily I got the disp checks right...
Volker
(cherry picked from commit
64a1d80851da5b05e70ec6c96f6e9bd473748369)
(cherry picked from commit
f04c5650a3aeca23591ddc781c4b297caaf9bb3f)
Jelmer Vernooij [Wed, 26 Nov 2008 17:20:51 +0000 (18:20 +0100)]
Move netr_SamDatabaseID8Bit to netlogon.idl to prevent problems with
forward enum declarations when compiled with C++.
Jelmer Vernooij [Wed, 26 Nov 2008 15:55:32 +0000 (16:55 +0100)]
Don't filter out any variables for config.pm, only for config.mk.
Andreas Schneider [Wed, 29 Oct 2008 13:12:04 +0000 (14:12 +0100)]
Fix circular dependency error with autoconf 2.6.3.
Signed-off-by: Andreas Schneider <anschneider@suse.de>
Jelmer Vernooij [Wed, 26 Nov 2008 15:22:11 +0000 (16:22 +0100)]
Use a simple shell loop instead of _AC_SUBST_VARS.
Autoconf has removed _AC_SUBST_VARS in newer versions.
Jeremy Allison [Tue, 25 Nov 2008 23:53:56 +0000 (15:53 -0800)]
Fix bug #5914 - Build failure: redefinition of struct name_list
Jeremy.
Jelmer Vernooij [Tue, 25 Nov 2008 14:42:47 +0000 (15:42 +0100)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba
Sam Liddicott [Tue, 25 Nov 2008 14:41:07 +0000 (15:41 +0100)]
Make sure dom_sid.h is installed.
Günther Deschner [Tue, 25 Nov 2008 11:19:35 +0000 (12:19 +0100)]
s3-samr: fix _samr_LookupNames return code.
Guenther
Michael Adam [Tue, 25 Nov 2008 14:24:43 +0000 (15:24 +0100)]
Revert "UNFINISHED - s3:idmap_ad: multi-domain"
This reverts commit
6a4957d35d50e6508917aca62b282ae4904187c8.
Sorry - this got accidentially pushed.
Michael
Michael Adam [Sun, 23 Nov 2008 21:59:40 +0000 (22:59 +0100)]
UNFINISHED - s3:idmap_ad: multi-domain
Michael
Michael Adam [Mon, 17 Nov 2008 09:29:41 +0000 (10:29 +0100)]
[s3]zfsacl: "return" is not a function.
Michael
Nils Goroll [Sun, 16 Nov 2008 23:55:16 +0000 (00:55 +0100)]
[s3]zfsacl: Prevent calling POSIX ACL vfs methods on zfs share.
This is a proposed fix for Bugs #5135 and #5446.
Signed-off-by: Michael Adam <obnox@samba.org>
Kai Blin [Sun, 23 Nov 2008 16:11:09 +0000 (17:11 +0100)]
libwbclient: Implement wbcGetgrent and wbcGetgrlist
Kai Blin [Sun, 23 Nov 2008 15:36:01 +0000 (16:36 +0100)]
libwbclient: Implement wbcGetpwent
Kai Blin [Sun, 23 Nov 2008 14:16:17 +0000 (15:16 +0100)]
libwbclient: Add placeholder function for WINBINDD_CCACHE_NTLMAUTH
Kai Blin [Sun, 23 Nov 2008 10:18:40 +0000 (11:18 +0100)]
libwbclient: Fix typo in wbcGetgrent docstring.
Kai Blin [Sun, 23 Nov 2008 10:17:42 +0000 (11:17 +0100)]
libwbclient: Add placeholder function for WINBINDD_GETGRLST
Kai Blin [Sat, 22 Nov 2008 23:57:33 +0000 (00:57 +0100)]
libwbclient: Add placeholder functions for wbcQuery[GSU]idTo[GSU]id
Dan Sledz [Mon, 17 Nov 2008 01:40:03 +0000 (17:40 -0800)]
Allow SYSLOG_FACILITY to be modified with a new configure option called --with-syslog-facility
Jeremy Allison [Mon, 24 Nov 2008 23:28:11 +0000 (15:28 -0800)]
Fix bug #5873 - ACL inheritance cannot be broken. This regresses #4308, but that will have to
be fixed another way.
Jeremy.
Mathias Dietz [Wed, 12 Nov 2008 13:32:45 +0000 (14:32 +0100)]
Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so
As of GPFS 3.2.1 PTF8 libgpfs will be available as GPL, so we don't need the
special libgpfs_gpl lib anymore. For backwards compatibility with pre-PTF8 GPFS
installations, still look there.
Stefan Metzmacher [Mon, 24 Nov 2008 14:04:12 +0000 (15:04 +0100)]
s3:libads/ldap.c: return an error instead of crashing when no realm is given
The bug was triggered by "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't ex
and "disable netbios = yes".
metze
Signed-off-by: Michael Adam <obnox@samba.org>
Volker Lendecke [Mon, 24 Nov 2008 07:56:46 +0000 (08:56 +0100)]
Fix nonempty blank lines
Volker Lendecke [Sun, 23 Nov 2008 22:48:17 +0000 (23:48 +0100)]
Get rid of pipes_struct->pipe_user, we have server_info now --- YESSS!
Volker Lendecke [Sun, 23 Nov 2008 22:14:39 +0000 (23:14 +0100)]
Remove unused make_connection_with_chdir()
Volker Lendecke [Sun, 23 Nov 2008 22:13:11 +0000 (23:13 +0100)]
Convert delete_driver_files to use create_conn_struct
Jerry, please check!
Volker Lendecke [Sun, 23 Nov 2008 22:01:24 +0000 (23:01 +0100)]
Convert get_correct_cversion to use create_conn_struct
Jerry, please check!
Volker Lendecke [Sun, 23 Nov 2008 21:46:08 +0000 (22:46 +0100)]
Convert move_driver_to_download_area to use create_conn_struct
This removes a use of struct current_user and the vuid
The become_user() here is unnecessary, within the spoolss handling code we have
switched to the authenticated pipe user anyway.
Jerry, please check!
Steven Danneman [Mon, 24 Nov 2008 02:20:19 +0000 (18:20 -0800)]
Fix to allow setting of NULL DACL/SACL
This is a modification of Jeremy's
7522ef15aca2429ef57c75d8297dd8121e79c9da
commit.
If no DACL/SACL is present in the packet, the SEC_INFO field should still be
passed down as is to the VFS layer to signal the creation of a NULL DACL/SACL.
As seen in metze RAW-ACL test_nttrans_create_null_dacl(), a NULL DACL is set
regardless of the SEC_DESC_DACL_PRESENT bit being set.
Kai Blin [Sun, 23 Nov 2008 22:54:27 +0000 (23:54 +0100)]
s3-rpcclient; Really fix compile warning.
Screwed up in
526c609d, now the real fix.
Michael Adam [Sun, 23 Nov 2008 09:43:10 +0000 (10:43 +0100)]
libcli/nbt: fix some extrasemi compile warnings.
Michael
Volker Lendecke [Sun, 23 Nov 2008 21:21:26 +0000 (22:21 +0100)]
Add auth_serversupplied_info to create_conn_struct
srvsvc needs it, as will printing