tprouty/samba.git
11 years agopam_winbind: Update cached creds during password change.
Günther Deschner [Wed, 11 Jun 2008 07:52:56 +0000 (09:52 +0200)]
pam_winbind: Update cached creds during password change.

Fix is from Bo Yang @ Novell.

Thanks!

11 years agoman pages: Don't refer to numbered chapter of the HOWTO collection.
Karolin Seeger [Tue, 10 Jun 2008 13:30:19 +0000 (15:30 +0200)]
man pages: Don't refer to numbered chapter of the HOWTO collection.

This fixes bug #5527.
Thanks to the Debian package maintainers for reporting!

Karolin
(cherry picked from commit b6696f4fbfc6aaffceef71c6099b8eaea58c1172)

11 years agoman pages: Fix broken smb.conf section about the 'get quota command'.
Karolin Seeger [Tue, 10 Jun 2008 08:54:21 +0000 (10:54 +0200)]
man pages: Fix broken smb.conf section about the 'get quota command'.

This fixes bug #5422.
Thanks to the Debian package maintainers for reporting!

Karolin
(cherry picked from commit 04e2470e2eeef34362f2893ec062ae16f74c28ed)

11 years agoDon't reset password last set time just because the expired flag
Jim McDonough [Mon, 9 Jun 2008 15:36:39 +0000 (11:36 -0400)]
Don't reset password last set time just because the expired flag
is set to 0.  If the account wasn't expired but autolocked,
using "net user /dom <username> /active:y" would clear this,
incorrectly setting the current time as the new "password last set"
time.

11 years agoman pages: Fix synonyms.
Karolin Seeger [Mon, 9 Jun 2008 13:05:26 +0000 (15:05 +0200)]
man pages: Fix synonyms.

Karolin
(cherry picked from commit d1ae27ddbe9c30996d2c593a37e65581c3ff482c)

11 years agoBugfix noticed by Herb. On using the again: tag as a
Jeremy Allison [Sun, 8 Jun 2008 21:17:47 +0000 (14:17 -0700)]
Bugfix noticed by Herb. On using the again: tag as a
goto target we were not reinitializing the array counts.

From Herb:

This is in the file nsswitch/winbindd_cm.c (samba-3.0.30) line 1236

We have a label again: where we keep trying to find the name of the DC
from the list of IPs returned by get_dcs. If we fail to figure out the
name we do a goto again at the end of the function. The problem is we
don't reset the num_dcs, num_addrs, etc and free the memory in the
various arrays. This seems wrong to me. I have a winbindd core where
I have 9 IPs returned for the DCs but at the time of the crash num_dcs
is 87 and if I look through the array dcs it keeps repeating entries
from the same group of 9

Jerry, Volker and Guenther please check.

Jeremy.

11 years agopam_winbind: fix pam_sm_chauthtok for storing modified cached creds.
Günther Deschner [Fri, 6 Jun 2008 13:59:52 +0000 (15:59 +0200)]
pam_winbind: fix pam_sm_chauthtok for storing modified cached creds.

Thanks to Bo Yang for pointing this out.

Guenther

11 years agoMore correct fix (hopefully :-) for any memory leaks.
Jeremy Allison [Thu, 5 Jun 2008 21:34:35 +0000 (14:34 -0700)]
More correct fix (hopefully :-) for any memory leaks.
Jerry promised to check :-). Vl also please review.
Jeremy.

11 years agonet: fix joining w2k domains in "security = ads".
Günther Deschner [Thu, 5 Jun 2008 14:26:10 +0000 (16:26 +0200)]
net: fix joining w2k domains in "security = ads".

This repairs the join verification code which needs to try an anonymous
connection (as an authenticated connection will always fail with
NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT).

Guenther

11 years agoSamba3-HOWTO: Add improvements/fixes.
Karolin Seeger [Thu, 5 Jun 2008 13:18:41 +0000 (15:18 +0200)]
Samba3-HOWTO: Add improvements/fixes.

These improvements/fixes were reported by
Pete Boyd <petes-bugs@thegoldenear.org> in bug #4203.

Karolin
(cherry picked from commit 497196e713b05901f02a46755bce6a63734dcf4c)

11 years agonet: for robustness reasons, fallback to level 24 pwd set while joining.
Günther Deschner [Wed, 4 Jun 2008 18:02:13 +0000 (20:02 +0200)]
net: for robustness reasons, fallback to level 24 pwd set while joining.

DCERPC_FAULT_INVALID_TAG is returned by older windows releases, in that case it
is wise to do what we did prior to 3.0.28.

Guenther

11 years agoFix by Bo Yang <boyang@novell.com> for bug with winbindd trusted domain chil
Jeremy Allison [Tue, 3 Jun 2008 19:17:34 +0000 (12:17 -0700)]
Fix by Bo Yang <boyang@novell.com> for bug with winbindd trusted domain chil
not keeping primary domain online status up to date.
Jeremy.

11 years agoFix usage message for 'net idmap dump'.
Karolin Seeger [Tue, 25 Mar 2008 11:00:42 +0000 (12:00 +0100)]
Fix usage message for 'net idmap dump'.

Karolin
(cherry picked from commit c967b62dd3c924419fa4a72aa2143d6bef959d18)

11 years agoFix bug reported by David Eisner <deisner@gmail.com>. When allocating cli
Jeremy Allison [Tue, 3 Jun 2008 01:36:31 +0000 (18:36 -0700)]
Fix bug reported by David Eisner <deisner@gmail.com>. When allocating cli
buffers for large read/write - make sure we take account of the large
read/write SMB headers as well as the buffer space.
Jeremy.

11 years agoDon't let winbind getgroups crash when we have no gids in the token.
Günther Deschner [Fri, 28 Mar 2008 23:47:42 +0000 (00:47 +0100)]
Don't let winbind getgroups crash when we have no gids in the token.

Guenther

11 years agoFix location of smbldap-tools
Volker Lendecke [Mon, 2 Jun 2008 08:42:27 +0000 (10:42 +0200)]
Fix location of smbldap-tools

Thanks to Miguel Medalha <miguelmedalha@sapo.pt> for pointing this out

11 years agoFix use of smbconfoption in samba.entities.
Alexander Bokovoy [Sat, 31 May 2008 07:07:44 +0000 (11:07 +0400)]
Fix use of smbconfoption in samba.entities.
During documentation migration to git my fixes to samba.entities got lost.
Update them now from latest working version (from samba-web).

11 years agoSplit the winbindd_passdb backend into a 'builtin' and a 'sam'
Jeremy Allison [Sat, 31 May 2008 06:11:31 +0000 (23:11 -0700)]
Split the winbindd_passdb backend into a 'builtin' and a 'sam'
backend. This allows winbindd when running on a Samba PDC to
correctly answer wbinfo -u lists and other queries. I will
forward port this to 3.2 and 3.3 over the weekend. Passes
running under valgrind.
Jeremy.

11 years agoFix valgrind bug in debug statement. Don't reference uninitialized memory.
Jeremy Allison [Sat, 31 May 2008 00:37:34 +0000 (17:37 -0700)]
Fix valgrind bug in debug statement. Don't reference uninitialized memory.
Jeremy.

11 years agoFix bug #5504. winbindd children and parent were handing SIGTERM in the same way...
Jeremy Allison [Sat, 31 May 2008 00:23:59 +0000 (17:23 -0700)]
Fix bug #5504. winbindd children and parent were handing SIGTERM in the same way - deleting the socket !
Jeremy.

11 years agoFrom Michael R Sweet <mike@easysw.com>.
Jeremy Allison [Fri, 30 May 2008 17:03:57 +0000 (10:03 -0700)]
From Michael R Sweet <mike@easysw.com>.

All,

Noticed that smbspool.c still has my Easy Software Products copyright
on it.  The following patch fixes it to match the other code I've
contributed over the years...

Jeremy.

11 years agoFix joining NT4 domains.
Günther Deschner [Fri, 30 May 2008 13:59:49 +0000 (15:59 +0200)]
Fix joining NT4 domains.

The negotiated netlogon flags also need to be returned in case we received
NT_STATUS_ACCESS_DENIED from a netauth2 request.

Guenther

11 years agoFix winbindd on a PDC by reverting : 83b04c60fac76ccd2d5aecb14f8896a07d488b1f..6e6651...
Jeremy Allison [Thu, 29 May 2008 17:38:59 +0000 (10:38 -0700)]
Fix winbindd on a PDC by reverting : 83b04c60fac76ccd2d5aecb14f8896a07d488b1f..6e66512d5beb256a44c6703cdb8c7fa7e0fd8537.
We still need to address https://bugzilla.redhat.com/show_bug.cgi?id=429024, but this
will come later.
Jeremy.

11 years agoFix documentation networkless build. We did override build/catalog.xml but didn't...
Alexander Bokovoy [Thu, 29 May 2008 09:13:59 +0000 (13:13 +0400)]
Fix documentation networkless build. We did override build/catalog.xml but didn't define BUILDDIR for it

11 years agoUpdating release notes for 3.0.30 security release.
Gerald W. Carter [Wed, 28 May 2008 12:40:51 +0000 (07:40 -0500)]
Updating release notes for 3.0.30 security release.

11 years agoSecurity: Patche for CVE-2008-1105.
Gerald W. Carter [Wed, 28 May 2008 12:30:19 +0000 (07:30 -0500)]
Security: Patche for CVE-2008-1105.

    -- Summary --
    Specifically crafted SMB responses can result
    in a heap overflow in the Samba client code.
    Because the server process, smbd, can itself
    act as a client during operations such as
    printer notification and domain authentication,
    this issue affects both Samba client and server
    installations.

Ensure that we specify the buffer size used to store incoming SMB
packets.  This bug was originally introduced in Samba 2.2.4.  Patch from
Jeremy Allison.

11 years agoRelease scripts: Copy the support release scripts from the v3-3-tree
Gerald W. Carter [Tue, 27 May 2008 21:30:54 +0000 (16:30 -0500)]
Release scripts: Copy the support release scripts from the v3-3-tree
(cherry picked from commit 8555ceeca7ac50f18589c07d2deb45c1d6fe8010)

11 years agoFix Bug #5285. (libcap header mismatch)
Günther Deschner [Wed, 28 May 2008 11:20:16 +0000 (13:20 +0200)]
Fix Bug #5285. (libcap header mismatch)

Can someone with gpfs available test this ? The only codepath using this
function is the modules/gpfs.c module. The fix resolves at least the build
issues Samba has with recent kernel / libcap versions by using the portable
cap_get_proc()/cap_set_proc() interface (instead of using capget/capset).

Guenther

11 years agoMemory leak fixes from Chere Zhou <czhou@isilon.com>.
Jeremy Allison [Tue, 27 May 2008 19:28:21 +0000 (12:28 -0700)]
Memory leak fixes from Chere Zhou <czhou@isilon.com>.
Jeremy.

11 years agoMerge branch 'v3-0-test' of git://git.samba.org/samba into 3.0-test
Jim McDonough [Tue, 27 May 2008 09:32:20 +0000 (05:32 -0400)]
Merge branch 'v3-0-test' of git://git.samba.org/samba into 3.0-test

11 years agoSet version in v3-0-test to 3.0.30-GIT
Gerald Carter [Fri, 23 May 2008 18:15:02 +0000 (13:15 -0500)]
Set version in v3-0-test to 3.0.30-GIT

11 years agospnego SPN fix when contacting trusted domains
Steven Danneman [Wed, 7 May 2008 20:34:26 +0000 (13:34 -0700)]
spnego SPN fix when contacting trusted domains

cli_session_setup_spnego() was not taking into consideration the situation
where we're connecting to a trusted domain, specifically one (like W2K8)
which doesn't return a SPN in the NegTokenInit.

This caused two problems:

1) When guessing the SPN using kerberos_get_default_realm_from_ccache() we
were always using our default realm, not the realm of the domain we're
connecting to.

2) When falling back on NTLMSSP for authentication we were passing the name
of the domain we're connecting to for use in our credentials when we should be
passing our own workgroup name.

The fix for both was to split the single "domain" parameter into
"user_domain" and "dest_realm" parameters.  We use the "user_domain"
parameter to pass into the NTLM call, and we used "dest_realm" to create an SPN
if none was returned in the NegTokenInit2 packet.  If no "dest_realm" is
provided we assume we're connecting to our own domain and use the credentials
cache to build the SPN.

Since we have a reasonable guess at the SPN, I removed the check that defaults
us directly to NTLM when negHint is empty.

11 years agoUse machine account and machine password from our domain when
Steven Danneman [Thu, 8 May 2008 20:34:49 +0000 (13:34 -0700)]
Use machine account and machine password from our domain when
contacting trusted domains.

11 years agoman pages: Remove ldb man pages.
Karolin Seeger [Thu, 22 May 2008 09:00:19 +0000 (11:00 +0200)]
man pages: Remove ldb man pages.

Ldb-tools will be available starting with 3.2.

Karolin

11 years agoMake 3.0.x in sync with 3.2 here. v3-0-stable release-3-0-29
Jeremy Allison [Wed, 21 May 2008 20:06:46 +0000 (13:06 -0700)]
Make 3.0.x in sync with 3.2 here.
Jeremy.

11 years agoDon't error out on xflush if there's no buffer.
Jeremy Allison [Wed, 21 May 2008 20:02:40 +0000 (13:02 -0700)]
Don't error out on xflush if there's no buffer.
Jeremy.

11 years agoIn libsmbclient, map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT
Volker Lendecke [Sun, 25 Nov 2007 11:54:52 +0000 (12:54 +0100)]
In libsmbclient, map NT_STATUS_OBJECT_PATH_NOT_FOUND to ENOENT

Thanks to SATOH Fumiyasu!

This fixes bug 4974

11 years agoRemove -test from version string for release
Gerald W. Carter [Wed, 21 May 2008 19:20:17 +0000 (14:20 -0500)]
Remove -test from version string for release

11 years agoWork around iconv conversion failure from generated smb.conf.5 on Ubuntu 8.04.
Gerald (Jerry) Carter [Wed, 21 May 2008 17:54:43 +0000 (12:54 -0500)]
Work around iconv conversion failure from generated smb.conf.5 on Ubuntu 8.04.

Have no idea why the previous sequence of characters was causing
iconv to choke on my Ubuntu 8.04.  Reword the entry some
for clarity and to advoid this failure.

11 years agoSet version to 3.0.29 for release
Gerald W. Carter [Tue, 20 May 2008 16:45:54 +0000 (11:45 -0500)]
Set version to 3.0.29 for release

11 years agoUpdating release notes for 3.0.29
Gerald W. Carter [Tue, 20 May 2008 16:45:19 +0000 (11:45 -0500)]
Updating release notes for 3.0.29

11 years agoRestructuring of code to fix #5460. Remove search
Jeremy Allison [Mon, 19 May 2008 20:11:41 +0000 (13:11 -0700)]
Restructuring of code to fix #5460. Remove search
by name code from conn, we were already doing the
same check in the dfs_redirect() function, so move
it into parse_dfs_path() instead.
Jeremy.

11 years agoFix Bug #5461 and implement a very basic _samr_GetDisplayEnumerationIndex().
Günther Deschner [Fri, 16 May 2008 12:16:19 +0000 (14:16 +0200)]
Fix Bug #5461 and implement a very basic _samr_GetDisplayEnumerationIndex().

Citrix PM cannot use a Samba DC when having more then 900 groups as citrix
insists on calling _samr_GetDisplayEnumerationIndex() after receiving the first
900 groups via _samr_QueryDisplayInfo() to get the continuation index.

Guenther

11 years agoRe-add samr getdispinfoindex parsing which got lost in the glue commit.
Günther Deschner [Fri, 16 May 2008 12:14:55 +0000 (14:14 +0200)]
Re-add samr getdispinfoindex parsing which got lost in the glue commit.

Guenther

11 years agodocs: fix the manpage output of parameters list in smb.conf.5.
Michael Adam [Fri, 25 Apr 2008 12:08:10 +0000 (14:08 +0200)]
docs: fix the manpage output of parameters list in smb.conf.5.

There were some newlines missing in the template for samba:parameters.

Michael
(cherry picked from commit a47abfa9276765164870bd7541798ff1201379b1)

11 years agodocs: fix indentation in expand-smbxonfdoc.
Michael Adam [Fri, 25 Apr 2008 12:01:57 +0000 (14:01 +0200)]
docs: fix indentation in expand-smbxonfdoc.

Michael
(cherry picked from commit 79f53a06820b226cbfbc939ae9a6d255e4a4a2d1)

11 years agoIgnore intermediary documentation files in git
Alexander Bokovoy [Thu, 24 Apr 2008 19:41:35 +0000 (23:41 +0400)]
Ignore intermediary documentation files in git

Signed-off-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit e700cf9ef4aefcb04d500136d117ff13a51e6433)

11 years agoFix documentation build: manpages, links in the HTML documents.
Alexander Bokovoy [Thu, 24 Apr 2008 19:40:51 +0000 (23:40 +0400)]
Fix documentation build: manpages, links in the HTML documents.

Fixed manpages generation to properly create handle smb.conf parameters' titles
Changed HTML generator to include links for every smb.conf parameter.
Now we have correct linking between different HTML documents.

Signed-off-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit 056935ff1f5fefc3ca42f7006182fc80c94d91ab)

11 years agoRevert "docs: fix the manpage output of parameters list in smb.conf.5."
Michael Adam [Fri, 16 May 2008 10:19:35 +0000 (12:19 +0200)]
Revert "docs: fix the manpage output of parameters list in smb.conf.5."

This reverts commit 36322154332f9036d4259c5397eecb2c752fdfb1.

11 years agoman pages: Remove documentation for 'smb encrypt'.
Karolin Seeger [Fri, 16 May 2008 09:56:03 +0000 (11:56 +0200)]
man pages: Remove documentation for 'smb encrypt'.

Parameter new in 3.2.

Karolin

11 years agoman pages: Correct meta data: 3.2 -> 3.0.
Karolin Seeger [Fri, 16 May 2008 09:46:51 +0000 (11:46 +0200)]
man pages: Correct meta data: 3.2 -> 3.0.

Karolin

11 years agoman pages: Remove hint.
Karolin Seeger [Fri, 16 May 2008 09:26:26 +0000 (11:26 +0200)]
man pages: Remove hint.

Registry configurations are impossible in 3.0.

Karolin

11 years agodocs: fix the manpage output of parameters list in smb.conf.5.
Michael Adam [Fri, 25 Apr 2008 12:08:10 +0000 (14:08 +0200)]
docs: fix the manpage output of parameters list in smb.conf.5.

There were some newlines missing in the template for samba:parameters.

Michael
(cherry picked from commit a47abfa9276765164870bd7541798ff1201379b1)

11 years agoman pages: Remove documentation of 'net conf'.
Karolin Seeger [Fri, 16 May 2008 08:53:43 +0000 (10:53 +0200)]
man pages: Remove documentation of 'net conf'.

'net conf' is not included in 3.0.

Karolin

11 years agoman pages: Remove registry stuff from smb.conf man page.
Karolin Seeger [Fri, 16 May 2008 08:52:06 +0000 (10:52 +0200)]
man pages: Remove registry stuff from smb.conf man page.

Karolin

11 years agoman pages: Re-add documentation removed for 3.2.
Karolin Seeger [Fri, 16 May 2008 08:00:46 +0000 (10:00 +0200)]
man pages: Re-add documentation removed for 3.2.

'read bmpx' and 'open files database hash size' still exist in 3.0.

Karolin

11 years agoman pages: Downgrade the man pages according to the code.
Karolin Seeger [Thu, 15 May 2008 13:54:20 +0000 (15:54 +0200)]
man pages: Downgrade the man pages according to the code.

Karolin

11 years agolm_session_key is only 8 bytes. Don't confuse developers (ie. me :-)
Jeremy Allison [Thu, 15 May 2008 02:05:26 +0000 (19:05 -0700)]
lm_session_key is only 8 bytes. Don't confuse developers (ie. me :-)
by passing around 16 bytes, 8 of which end up unused.
Jeremy.

11 years agoFix two "this will never be null" warnings.
Jeremy Allison [Thu, 15 May 2008 02:02:14 +0000 (19:02 -0700)]
Fix two "this will never be null" warnings.
Jeremy.

11 years agoFix a "may be used uninitialized" error.
Jeremy Allison [Thu, 15 May 2008 02:01:46 +0000 (19:01 -0700)]
Fix a "may be used uninitialized" error.
Jeremy.

11 years agoFix bug #5464. Pointed out by Herb @ Connectathon. In fork_domain_child() we call :
Jeremy Allison [Wed, 14 May 2008 21:12:14 +0000 (14:12 -0700)]
Fix bug #5464. Pointed out by Herb @ Connectathon. In fork_domain_child() we call :

CatchChild();

*before* we fork the domain child. This call establishes a signal handler that
eats SIGCLD signals and doesn't call sys_select_signal() as the main daemon
SIGCLD handler should do. This causes the parent to ignore dead children and
time out, instead of calling winbind_child_died() on receipt of the signal. The
correct fix is to move the CatchChild call into the child code after the fork.

Jeremy.

11 years agoEnsure we don't keep searching for sharename if it's
Jeremy Allison [Wed, 14 May 2008 21:10:26 +0000 (14:10 -0700)]
Ensure we don't keep searching for sharename if it's
not the start of the list.
Jeremy.

11 years agoCombination patch back port of :
Jeremy Allison [Tue, 13 May 2008 22:26:17 +0000 (15:26 -0700)]
Combination patch back port of :

    Fix bug #5460. The problem is RHEL5.0 shipped a CIFS client
    that sets the DFS bit on pathnames but doesn't
    send DFS paths. This causes lookups to fail as
    the smbd/msdfs.c code now just eats the first
    two parts of the pathname and uses the rest as
    the local path. The previous hostname check
    used to protect us from that as we knew that
    when the hostname was invalid it was a local
    path (and a broken client).
    I didn't want to put that check back in, but
    came up with another idea - even though the
    hostname can be a different one, the sharename
    must be valid on this machine. So we can check
    for a valid sharename instead.

    Second part of patch for bug #5460. Cope with pathnames
    that don't look like \xxx\yyy, cope with arbitrary length.
    Jeremy.

    Fix debug message.
    Jeremy.

11 years agoEnable winbind child processes to do something with signals,
Jim McDonough [Tue, 13 May 2008 20:29:53 +0000 (16:29 -0400)]
Enable winbind child processes to do something with signals,
in particular closing and reopening logs on SIGHUP.

11 years agoFix signing problem in the client with transs requests
Volker Lendecke [Tue, 13 May 2008 14:23:19 +0000 (16:23 +0200)]
Fix signing problem in the client with transs requests

This is a different fix than Jeremy put into 3-0-test with 040db1ce85 and other
branches with different hashes. Jeremy, I think your fix led to bug 5436, so I
reverted your fix. This fixes the original problem I found with the transs
requests for large rpc queries in a different way. Please check!

Thanks,

Volker

11 years agoRevert "Fix signing bug found by Volker. That one was *subtle*."
Volker Lendecke [Tue, 13 May 2008 14:41:23 +0000 (16:41 +0200)]
Revert "Fix signing bug found by Volker. That one was *subtle*."

This reverts commit 040db1ce851909704d093538ba063863fa11f73e.

11 years agoDon't free memory from getpass. Fix for bug reported by
Jeremy Allison [Sat, 10 May 2008 00:27:52 +0000 (17:27 -0700)]
Don't free memory from getpass. Fix for bug reported by
Chris Rohlf <chris.rohlf@gmail.com>.
Jeremy.

11 years agoFix from Martin Zielinski <mz@seh.de>. Don't delete files when
Jeremy Allison [Tue, 6 May 2008 18:47:46 +0000 (11:47 -0700)]
Fix from Martin Zielinski <mz@seh.de>. Don't delete files when
they're in use by other drivers.
Jeremy.

11 years agoMerge 3fc1ab210b8772ee9f867499c0b1a7bb4bcdd285 from 3.2.
Jeremy Allison [Tue, 6 May 2008 18:23:24 +0000 (11:23 -0700)]
Merge 3fc1ab210b8772ee9f867499c0b1a7bb4bcdd285 from 3.2.

    The first of Martin Zielinski <mz@seh.de> Vista printing patches.
    Jerry will test and should get into 3.2 final (and the next 3.0.x
    release).
    Jeremy.

11 years agoDon't use const as this gives a warning for 3.0.x.
Jeremy Allison [Tue, 6 May 2008 16:35:21 +0000 (09:35 -0700)]
Don't use const as this gives a warning for 3.0.x.
Jeremy.

11 years agoFix bug #5095, "Manage Documents privilege is not functional".
Jeremy Allison [Tue, 6 May 2008 16:24:23 +0000 (09:24 -0700)]
Fix bug #5095, "Manage Documents privilege is not functional".
Should map the created sd to printer jobs, not printer.
Jeremy.

11 years agoThis code is the same in 3.0.x winbindd.
Jeremy Allison [Wed, 30 Apr 2008 16:44:50 +0000 (09:44 -0700)]
This code is the same in 3.0.x winbindd.
From commit commit 5a270bc99f52483f168d662d843672d05be74473
Author: Gerald W. Carter <jerry@samba.org>

    Winbind: Prevent cycle in children list when reaping dead child processes.

    Thanks to Glenn Curtis and Kyle Stemen @ Likewise.  Their explanation is:

        In winbindd_dual.c, there is a list of children processes that
        is maintained using macros DTLIST_ADD and DTLIST_REMOVE. In the
        case when a scheduled_async_request fails, the particular child
        was located in the list, and its attributes were cleared out
        and it was reused for a subsequent async request. The bug was that
        the new request would queue the same node into the doubly-linked
        list and would result in list->next pointing to the same node as
        list itself. This would set up an infinite loop in the processing of
        the for loop when the list of children was referenced.

        Solution was to fully remove the child node from the list, such that
        it could be inserted without risk of being inserted twice.

    Note that the child is re-added to the list in fork_domain_child() again.
Jeremy.

11 years agomakefile: remove $(GPLIBS). what and why-ever this was here...
Günther Deschner [Wed, 30 Apr 2008 16:39:22 +0000 (18:39 +0200)]
makefile: remove $(GPLIBS). what and why-ever this was here...

Guenther

11 years agopam_winbind: Fix Bug #5430 (patch from fumiyas@osstech.co.jp).
Günther Deschner [Wed, 30 Apr 2008 16:30:16 +0000 (18:30 +0200)]
pam_winbind: Fix Bug #5430 (patch from fumiyas@osstech.co.jp).

Guenther

11 years agoBUG 5107: Fix handling of large DNS replies on AIX and Solaris.
Gerald W. Carter [Wed, 30 Apr 2008 14:57:15 +0000 (09:57 -0500)]
BUG 5107: Fix handling of large DNS replies on AIX and Solaris.

On AIX, Solaris, and possibly some older glibc systems (e.g. SLES8)
truncated replies never give back a resp_len > buflen
which ends up causing DNS resolve failures on large tcp DNS replies.

Also add more debug lines about processing the DNS reply.

(cherry-picked from 5ed9b92097460cd8180db806a08213e97cfb8daa
 with manually resolved conflicts)

11 years agor24853: Rename function as Jerry asked.
Rafal Szczesniak [Fri, 31 Aug 2007 21:25:53 +0000 (21:25 +0000)]
r24853: Rename function as Jerry asked.
s/net_use_upn_machine_account/net_use_krb_machine_account/

rafal
(cherry picked from commit 86af9fedad71697f22cc739518340f7753b8f9da)

11 years agonet: fix post join verification.
Rafal Szczesniak [Wed, 29 Aug 2007 19:55:13 +0000 (19:55 +0000)]
net: fix post join verification.

This patch is based on commit 30d99d8ac3379caadc5bdb353977149d1ee16403
and just a little modified to apply on 3-0-test.

Guenther

Original commit message:

r24789: Add implementation of machine-authenticated connection to netlogon
pipe used when connecting to win2k and newer domain controllers. The
server may be configured to deny anonymous netlogon connections which
would stop domain join verification step. Still, winnt domains require
such smb sessions not to be authenticated using machine credentials.
Creds employed in smb session cannot have a username in upn form, so
provide the separate function to use machine account.

rafal

11 years agoFix bug 5419
Volker Lendecke [Sat, 26 Apr 2008 07:24:39 +0000 (09:24 +0200)]
Fix bug 5419

This is a port of Steven Danneman's 3-2 fix that was pushed with fe9f48bfe

Thanks!

11 years agoFix documentation build for v3-0-test after grafting docs-xml. Changes are the same...
Alexander Bokovoy [Thu, 24 Apr 2008 19:58:42 +0000 (23:58 +0400)]
Fix documentation build for v3-0-test after grafting docs-xml. Changes are the same as for v3-2-test

11 years agoAdding DTD from svn:externals link in samba-docs SVN repo
Gerald W. Carter [Tue, 22 Apr 2008 15:31:22 +0000 (10:31 -0500)]
Adding DTD from svn:externals link in samba-docs SVN repo

11 years agoMoving docs tree to docs-xml to make room for generated docs in the release tarball.
Gerald W. Carter [Tue, 22 Apr 2008 15:09:40 +0000 (10:09 -0500)]
Moving docs tree to docs-xml to make room for generated docs in the release tarball.

11 years agoNext update of VFS modules development guide
Alexander Bokovoy [Tue, 15 Apr 2008 14:53:18 +0000 (14:53 +0000)]
Next update of VFS modules development guide

11 years agoUse title from a linked item to show up as text of the link if there is no endterm...
Alexander Bokovoy [Tue, 15 Apr 2008 07:37:36 +0000 (07:37 +0000)]
Use title from a linked item to show up as text of the link if there is no endterm or content in the link itself

11 years agoUse indexterm instead of term in expansion xslts
Alexander Bokovoy [Tue, 15 Apr 2008 07:35:29 +0000 (07:35 +0000)]
Use indexterm instead of term in expansion xslts

11 years agoFix numbering in the Samba3 developer's guide
Alexander Bokovoy [Tue, 15 Apr 2008 07:26:30 +0000 (07:26 +0000)]
Fix numbering in the Samba3 developer's guide

11 years agoSwitch to SVG and Inkscape to generate pictures instead of Dia.
Alexander Bokovoy [Mon, 14 Apr 2008 15:39:30 +0000 (15:39 +0000)]
Switch to SVG and Inkscape to generate pictures instead of Dia.
This was discussed months ago and with Inkscape getting better and more clear in SVG processing
it is now a preffered tool to create and process vector images.

11 years agoRemove smbconfexample check from test index.xml, it is not used anymore
Alexander Bokovoy [Mon, 14 Apr 2008 15:37:20 +0000 (15:37 +0000)]
Remove smbconfexample check from test index.xml, it is not used anymore

11 years agoPrettify attributions
Alexander Bokovoy [Mon, 14 Apr 2008 15:36:39 +0000 (15:36 +0000)]
Prettify attributions

11 years agoAdd small preface to a VFS guide. More to come.
Alexander Bokovoy [Mon, 14 Apr 2008 15:35:45 +0000 (15:35 +0000)]
Add small preface to a VFS guide. More to come.

11 years agoAdd first cut at networkless build instructions for samba-docs
Alexander Bokovoy [Sun, 13 Apr 2008 20:11:27 +0000 (20:11 +0000)]
Add first cut at networkless build instructions for samba-docs

11 years agoAttempt to add DTDs as svn external repository for build
Alexander Bokovoy [Sun, 13 Apr 2008 19:54:15 +0000 (19:54 +0000)]
Attempt to add DTDs as svn external repository for build

11 years agoCorrect usage of multiple LDAP servers as passdb backend. Patch from Björn Jacke...
Karolin Seeger [Mon, 7 Apr 2008 15:36:23 +0000 (15:36 +0000)]
Correct usage of multiple LDAP servers as passdb backend. Patch from Björn Jacke <bj@sernet.de>

11 years agoCorrect description of cups options. Patch from Björn Jacke <bj@sernet.de>.
Karolin Seeger [Mon, 7 Apr 2008 15:10:14 +0000 (15:10 +0000)]
Correct description of cups options. Patch from Björn Jacke <bj@sernet.de>.

11 years agoForgot to add these macros to a samba-docs repository
Alexander Bokovoy [Mon, 7 Apr 2008 11:08:19 +0000 (11:08 +0000)]
Forgot to add these macros to a samba-docs repository

11 years agoFix more entries with back slashes that need to use literal formatting
Alexander Bokovoy [Mon, 7 Apr 2008 05:43:55 +0000 (05:43 +0000)]
Fix more entries with back slashes that need to use literal formatting

11 years agoFix typo
Alexander Bokovoy [Sun, 6 Apr 2008 20:55:25 +0000 (20:55 +0000)]
Fix typo

11 years agoInsert space inside this very long string. It is arguable how to fix it properly...
Alexander Bokovoy [Sun, 6 Apr 2008 20:54:09 +0000 (20:54 +0000)]
Insert space inside this very long string. It is arguable how to fix it properly but at least man pages good now

11 years agoRefresh our XSL templates to work with current docbook xslt for manpages
Alexander Bokovoy [Sun, 6 Apr 2008 20:29:06 +0000 (20:29 +0000)]
Refresh our XSL templates to work with current docbook xslt for manpages

11 years agoAdd man page metadata fields that are used by temprorary manpages XSLT
Alexander Bokovoy [Sun, 6 Apr 2008 20:26:45 +0000 (20:26 +0000)]
Add man page metadata fields that are used by temprorary manpages XSLT

11 years agoDocument --verbose option to wbinfo
Gerald Carter [Mon, 31 Mar 2008 20:40:24 +0000 (20:40 +0000)]
Document --verbose option to wbinfo