10 years agoWHATSNEW: Start WHATSNEW for 3.3.0rc1. v3-3-stable
Karolin Seeger [Thu, 2 Oct 2008 12:34:01 +0000 (14:34 +0200)]
WHATSNEW: Start WHATSNEW for 3.3.0rc1.

(cherry picked from commit 21d8210724dea1ceb94081cfebef73639d6f3741)

10 years agoVERSION: Raise version number.
Karolin Seeger [Thu, 2 Oct 2008 12:32:05 +0000 (14:32 +0200)]
VERSION: Raise version number.


10 years agoWhitespace cleanup. release-3-3-0pre2
Jeremy Allison [Wed, 1 Oct 2008 22:00:22 +0000 (15:00 -0700)]
Whitespace cleanup.
(cherry picked from commit e782150175ff324b6e0ef1802a9e17f9a5aea560)

10 years agoFix use of DLIST_REMOVE as spotted by Constantine Vetoshev <>.
Jeremy Allison [Wed, 1 Oct 2008 20:23:09 +0000 (13:23 -0700)]
Fix use of DLIST_REMOVE as spotted by Constantine Vetoshev <>.
This API is unusual in that if used to remove a non-list head it nulls out
the next and prev pointers. This is what you want for debugging (don't want
an entry removed from the list to be still virtually linked into it) but
means there is no consistent idiom for use as the next and prev pointers
get trashed on removal from the list, meaning you must save them yourself.
You can use it one way when deleting everything via the head pointer, as
this preserves the next pointer, but you *must* use it another way when not
deleting everything via the head pointer. Fix all known uses of this (the main
one is in conn_free_internal() and would not free all the private data entries
for vfs modules. The other changes in web/statuspage.c and winbindd_util.c
are not strictly neccessary, as the head pointer is being used, but I've done
them for consistency. Long term we must revisit this as this API is too hard
to use correctly.
(cherry picked from commit 737825183115732de1f1d6d2bd89ce6402a65b20)

10 years agoTurn the socket connections into a refcounted list - in the common case there'll...
Jeremy Allison [Wed, 1 Oct 2008 19:28:45 +0000 (12:28 -0700)]
Turn the socket connections into a refcounted list - in the common case there'll now only be one socket per smbd.
Changed the format of the wire data to (a) include a version number (V1) as the first element. (b) removed the
";)" at the end an replaced it with a "\n". Receiver can change back if needed, and now receiver can just log
"as-is" to a text file (making testing easier). Added my (C). Sorry Holger, but I've changed quite a bit now.
(cherry picked from commit 9a90ceac52f8623dde2bf50e630b10aebbc0e28d)

10 years agoWHATSNEW: Update changes since 3.3.0pre1 and release date.
Karolin Seeger [Wed, 1 Oct 2008 12:22:10 +0000 (14:22 +0200)]
WHATSNEW: Update changes since 3.3.0pre1 and release date.

(cherry picked from commit eef33fe6383afb5870aef0eef132cd0ba88bac83)

10 years agoConvert to allocated strings. Use write_data(), not send as this doesn't correctly
Jeremy Allison [Tue, 30 Sep 2008 23:20:43 +0000 (16:20 -0700)]
Convert to allocated strings. Use write_data(), not send as this doesn't correctly
deal with EINTR. Jim and Holger please check this still works.
(cherry picked from commit bec55237c9c5687d947562524124b7aa76209b8f)

10 years agoRemove current_user_info - not needed.
Jeremy Allison [Tue, 30 Sep 2008 22:22:24 +0000 (15:22 -0700)]
Remove current_user_info - not needed.
(cherry picked from commit 093fc8c6bf1420c0f1e171598c4894b4df24862c)

10 years agoRestructure the module so it connects to the remote data sink
Jeremy Allison [Tue, 30 Sep 2008 22:11:26 +0000 (15:11 -0700)]
Restructure the module so it connects to the remote data sink
on connect, and closes the socket on client disconnect. This should
make it much more efficient. Store the remote fd in a private data
pointer off the handle. Finally we need to remove the fstrings and
convert to allocated buffer storage.
(cherry picked from commit e3e89077a5559eda39ea27f0ce6f9f0ebeba8f1e)

10 years agoFix the make test problem Karolin reported. Now rename_open_files actually works...
Jeremy Allison [Tue, 30 Sep 2008 20:22:44 +0000 (13:22 -0700)]
Fix the make test problem Karolin reported. Now rename_open_files actually works correctly we must emit the change notify before we change the name, not before.
(cherry picked from commit 48c0dff0c5e36313619fb39d2bfb57d49ed2141e)

10 years agore-added "winbind:ignore domains" patch
Andrew Tridgell [Mon, 29 Sep 2008 20:34:58 +0000 (13:34 -0700)]
re-added "winbind:ignore domains" patch

This option really is essential, as we discover again and again at
customer sites. Due to bugs in winbind some domains are toxic. When
you are installing at a site and a particular domain in a complex
setup causes winbind to segfault or hang then you need a way to
disable that domain and continue.

In an ideal world winbind could handle arbitrarily complex ADS
domains, but we are nowhere near that yet. If we ever get to that
stage then we won't need this option.
(cherry picked from commit f0f2fbd4800fb4a1df26f03f37b9972101657fdd)

10 years agofixed an (unlikely) memory leak
Andrew Tridgell [Mon, 29 Sep 2008 19:04:57 +0000 (12:04 -0700)]
fixed an (unlikely) memory leak
(cherry picked from commit 8b908862ec7de000865cd8dfa691f5643cb3d099)

10 years agofixed a segfault on the ctdb destructor code
Andrew Tridgell [Mon, 29 Sep 2008 18:27:31 +0000 (11:27 -0700)]
fixed a segfault on the ctdb destructor code
(cherry picked from commit f495968c88f07b74a943da9e034084b72f5a1c8b)

10 years agoremoved unused variables
Andrew Tridgell [Mon, 29 Sep 2008 18:24:48 +0000 (11:24 -0700)]
removed unused variables
(cherry picked from commit c48fd3cee0a91617123d79bccff7ec1f6008fb26)

10 years agofixed segv on startup with trusted domains
Andrew Tridgell [Mon, 29 Sep 2008 18:18:21 +0000 (11:18 -0700)]
fixed segv on startup with trusted domains

With some setups, idmap_tdb2_allocate_id can be called before the
allocate backend is initialised, leading to a segv. This change
ensures that the db is opened in all paths that use it
(cherry picked from commit 8ec11590f471d2852e5ffd3d1d65da54bd2182ca)

10 years agoEnsure we null out fsp after a close in all paths.
Jeremy Allison [Mon, 29 Sep 2008 17:56:54 +0000 (10:56 -0700)]
Ensure we null out fsp after a close in all paths.
(cherry picked from commit 35a074c24b9b320bb23e82d3f44e17c5fadbcf62)

10 years agoAvoid freeing fsp twice when opening new_file fails. (Debian #431696)
Jelmer Vernooij [Mon, 29 Sep 2008 17:53:17 +0000 (10:53 -0700)]
Avoid freeing fsp twice when opening new_file fails. (Debian #431696)
If opening new_file fails, fsp would still be set to the files_struct of
(cherry picked from commit bc0a340c61198879dc10ccbcc3c3ceb7f358b270)

10 years agodocs: Adapt version strings in man vfs_smb_traffic_analyzer.
Karolin Seeger [Mon, 29 Sep 2008 13:39:43 +0000 (15:39 +0200)]
docs: Adapt version strings in man vfs_smb_traffic_analyzer.

(cherry picked from commit 662eda8458a304b224b6bc502f8030a07030b7c2)

10 years agoAdd an initial version of a manpage for the vfs_smb_traffic_analyzer module.
Holger Hetterich [Mon, 29 Sep 2008 12:34:36 +0000 (14:34 +0200)]
Add an initial version of a manpage for the vfs_smb_traffic_analyzer module.
(cherry picked from commit 7857b783049b19d32a078927a46cb1070e863b45)

10 years agoSecond part of the fix for bug #5790 - samba returns STATUS_OBJECT_NAME_NOT_FOUND...
Jeremy Allison [Sat, 27 Sep 2008 01:33:07 +0000 (18:33 -0700)]
Second part of the fix for bug #5790 - samba returns STATUS_OBJECT_NAME_NOT_FOUND on set file disposition call.
This was my fault. I use a singleton cache (positive and negative) to speed up pathname based qfileinfo/setfileinfo lookups for alternate fsp's open on the same path. I only invalidated the negative cache on adding a new file fsp, as I incorrectly imagined the new fsp was put at the *end* of the open files list. DLIST_ADD puts it at the start, meaning any subsequent open wasn't seen once the cache was set. Doh !
(cherry picked from commit 857433ec526caf73905dc9cb4fa25fb6355e5004)

10 years agoFix bug #5790 samba returns STATUS_OBJECT_NAME_NOT_FOUND on set file disposition.
Jeremy Allison [Wed, 24 Sep 2008 21:25:00 +0000 (14:25 -0700)]
Fix bug #5790 samba returns STATUS_OBJECT_NAME_NOT_FOUND on set file disposition.
We were checking that fd != -1 in file_find_di_XXX calls which is no longer
needed due to a change in internal semantics.
(cherry picked from commit 276c8395f15bc18f10d455848f7038e3465f0d52)

10 years agoWHATSNEW: Add Holger's VFS module to the list of changes.
Karolin Seeger [Mon, 29 Sep 2008 14:47:14 +0000 (16:47 +0200)]
WHATSNEW: Add Holger's VFS module to the list of changes.

(cherry picked from commit c96dd7196606f53f60aff34b9358881fdd9d9f20)

10 years agolibwbclient: fix doxygen warnings.
Günther Deschner [Fri, 26 Sep 2008 23:21:53 +0000 (01:21 +0200)]
libwbclient: fix doxygen warnings.

(cherry picked from commit 461dfd9e4e225d4bf458baf1cc384be253c73e40)

10 years agowbinfo: add change-user-password command.
Günther Deschner [Fri, 15 Aug 2008 00:01:14 +0000 (02:01 +0200)]
wbinfo: add change-user-password command.

(This used to be commit e572ede9995a66ae452ab25018b8df16101a2c2a)
(cherry picked from commit 1f0cd6a7443b08044d9fbc328fc729e3e2658e46)
(cherry picked from commit 410d69fde157a3bd7b3a92592e1e2741286b7cc5)

10 years agolibwbclient: add wbcChangeUserPassword and wbcChangeUserPasswordEx.
Günther Deschner [Fri, 15 Aug 2008 00:00:46 +0000 (02:00 +0200)]
libwbclient: add wbcChangeUserPassword and wbcChangeUserPasswordEx.

(cherry picked from commit 62e7b4aa32051bce34c890cb41270e5fe31111ca)
(cherry picked from commit 8627f684c64d0185245dea9b6b73aa2e2633a8f6)

10 years agolibgpo: add gpext_security module build to configure.
Günther Deschner [Fri, 26 Sep 2008 22:55:42 +0000 (00:55 +0200)]
libgpo: add gpext_security module build to configure.

(cherry picked from commit 1861a8b8e1958c3118008f536817e93cca410fa4)

10 years agolibgpo: fix copyright.
Günther Deschner [Fri, 26 Sep 2008 22:44:22 +0000 (00:44 +0200)]
libgpo: fix copyright.

(cherry picked from commit ff503694ff3db57e1b7e98f752e3c989a79f46bd)

10 years agolibgpo: add security CSE skeleton.
Günther Deschner [Fri, 26 Sep 2008 22:43:07 +0000 (00:43 +0200)]
libgpo: add security CSE skeleton.

(cherry picked from commit 49fb18eaab6fb852cd5ba5971cbaa5e15d542654)

10 years agoFix bug #5797 - Moving readonly files fails. Reported by
Jeremy Allison [Fri, 26 Sep 2008 22:13:41 +0000 (15:13 -0700)]
Fix bug #5797 - Moving readonly files fails. Reported by
We don't need to deny a DELETE open on a readonly file (I'm also adding a s4
torture test for this), the set_file_disposition call will return
NT_STATUS_CANNOT_DELETE if the delete-on-close bit is set
on a readonly file (and we already do this).
(cherry picked from commit 14fec47f7171591e5799b81c90c3f5a856002ed0)

10 years agolibgpo: fix invalid cast in scripts CSE.
Günther Deschner [Fri, 26 Sep 2008 21:36:07 +0000 (23:36 +0200)]
libgpo: fix invalid cast in scripts CSE.

(cherry picked from commit af1878009e0bb7ef43bf445f5c167f3bbcc43fd2)

10 years agonet: Make share type lookup a function.
Kai Blin [Wed, 24 Sep 2008 21:23:01 +0000 (23:23 +0200)]
net: Make share type lookup a function.
(cherry picked from commit 5db15bc0f67b478ef95ec3e327f7a40d90c535bd)

10 years agos3-srvsvc: fix _srvsvc_NetShareAdd segfault.
Günther Deschner [Thu, 25 Sep 2008 23:32:16 +0000 (01:32 +0200)]
s3-srvsvc: fix _srvsvc_NetShareAdd segfault.

parm_err is not a ref pointer.

(cherry picked from commit 29942b7043c1a31ad4fb76d01ab19fd3dbf26f0a)

10 years agoUse IPv4/v6 independent calls. Change safe_strcpy/cat to strlcpy/cat (this
Jeremy Allison [Thu, 25 Sep 2008 19:01:47 +0000 (12:01 -0700)]
Use IPv4/v6 independent calls. Change safe_strcpy/cat to strlcpy/cat (this
needs changing to talloc_sprintf) and fix file descriptor resource leaks
in error paths. Jim and Holger please check !
(cherry picked from commit eb249830ae4037244de6616b4ec8771568da34c6)

10 years agoidmap: Fix typo is gid2sid() that was caching using idmap_cache_set_sid2uid()
Gerald W. Carter [Thu, 25 Sep 2008 17:43:56 +0000 (10:43 -0700)]
idmap: Fix typo is gid2sid() that was caching using idmap_cache_set_sid2uid()
(cherry picked from commit 89fa178011c44dc5c4bcfafc6643234e01b2d536)

10 years agoWHATSNEW: Add summary of the idmap_hash plugin and Winbind's "name aliasing"
Gerald W. Carter [Thu, 25 Sep 2008 17:42:31 +0000 (10:42 -0700)]
WHATSNEW: Add summary of the idmap_hash plugin and Winbind's "name aliasing"
(cherry picked from commit bddc2956634194d7daedbf5cd18964811ef6fe5e)

10 years agoRemove these no longer used include files.
Jeremy Allison [Thu, 25 Sep 2008 17:05:01 +0000 (10:05 -0700)]
Remove these no longer used include files.
(cherry picked from commit 18cf398870e4d7cb336c9cf50f863611862af874)

10 years agoidmap_hash: Fix the nss_info link during "make install"
Gerald W. Carter [Thu, 25 Sep 2008 16:41:49 +0000 (09:41 -0700)]
idmap_hash: Fix the nss_info link during "make install"
(cherry picked from commit 701b9f34c986283fdead9ddd42147dd49d5e481e)

10 years agoidmap_adex: Fix the nss_info install link.
Gerald W. Carter [Thu, 25 Sep 2008 16:14:58 +0000 (09:14 -0700)]
idmap_adex: Fix the nss_info install link.
(cherry picked from commit ba2c14e8474a20a9aabb07486a3c4e322980f96a)

10 years agoDocument the new hash and adex idmap/nss_info plugins.
Gerald W. Carter [Tue, 23 Sep 2008 18:43:05 +0000 (11:43 -0700)]
Document the new hash and adex idmap/nss_info plugins.
(cherry picked from commit 77bc0be0536bcd6a3ce8283a708828bebbbffee3)

10 years agoDocument how to enable the name aliasing support in Winbind.
Gerald W. Carter [Tue, 23 Sep 2008 18:40:28 +0000 (11:40 -0700)]
Document how to enable the name aliasing support in Winbind.
(cherry picked from commit 6dc81eb85b11851794619a1f2769d68cd9a54fb6)

10 years agos3:lib/ldb: Don't return already freed pointer on error.
Stefan Metzmacher [Thu, 25 Sep 2008 01:52:04 +0000 (18:52 -0700)]
s3:lib/ldb: Don't return already freed pointer on error.


Signed-off-by: Karolin Seeger <>
(cherry picked from commit 508cd214ef9abf0d69fbc7f5408d004162092b39)

10 years agoFix the new vfs_smb_traffic_analyzer build for static links
Jim McDonough [Thu, 25 Sep 2008 00:47:03 +0000 (20:47 -0400)]
Fix the new vfs_smb_traffic_analyzer build for static links
(cherry picked from commit 41887550fbacae887d9ad28559cc8bdcc6ac84ac)

10 years agoSMB traffic analyzer vfs module from Holger Hetterich <>
Holger Hetterich [Wed, 24 Sep 2008 23:01:00 +0000 (19:01 -0400)]
SMB traffic analyzer vfs module from Holger Hetterich <>

Used to gather data to feed to a database for live and historical
analysis of usage per user, per share, etc.

Helper apps to read the data still to come.  This one still needs to be
made ipv6 enabled (connection is made to the helper app).
(cherry picked from commit bd9499baa078ce3ea3640ce441a0e078b59a423f)

10 years agoWHATSNEW: Update changes since 3.3.0pre1.
Karolin Seeger [Wed, 24 Sep 2008 22:12:51 +0000 (15:12 -0700)]
WHATSNEW: Update changes since 3.3.0pre1.

(cherry picked from commit c8d5a9088f6a120e2da8c404b269d47a235fb933)

10 years agoprinting: Rename new parameter "cups timeout" to "cups connection timeout".
Karolin Seeger [Wed, 24 Sep 2008 16:53:21 +0000 (09:53 -0700)]
printing: Rename new parameter "cups timeout" to "cups connection timeout".

(cherry picked from commit 417071214370e1d87417556af9e1410ef06403c7)

10 years agopam_winbind: fix bug #5784, build issue on solaris.
Günther Deschner [Wed, 24 Sep 2008 17:57:24 +0000 (19:57 +0200)]
pam_winbind: fix bug #5784, build issue on solaris.

(cherry picked from commit 8b5745d5caa2f41ab4b1717872f2ab0c23fbba2c)

10 years agoWHATSNEW: Update changes since 3.3.0pre1.
Karolin Seeger [Wed, 24 Sep 2008 02:49:35 +0000 (19:49 -0700)]
WHATSNEW: Update changes since 3.3.0pre1.

(cherry picked from commit 58e15a9d0fbf096b6b1587a34772c68f8c99393a)

10 years agoprinting: Add new parameter "cups timeout".
Karolin Seeger [Tue, 23 Sep 2008 23:54:05 +0000 (16:54 -0700)]
printing: Add new parameter "cups timeout".

The default timeout for connections to CUPS servers is set
to 5 minutes in the CUPS libraries. The smbd hangs on startup
until the timeout is reached if the CUPS server is unreachable.
This parameter makes the timeout configurable. The default value
is set to 30 seconds.

(cherry picked from commit 263cacf1f2dd4003862184ea3a2716ace0dbb086)

10 years agoFix winbindd crash in an unusual failure mode. Bug #5737. Based on original patch...
Jeremy Allison [Tue, 23 Sep 2008 23:40:16 +0000 (16:40 -0700)]
Fix winbindd crash in an unusual failure mode. Bug #5737. Based on original patch from
(cherry picked from commit d5c490d79024ee41544512f7968999a6b3a313dc)

10 years agoFix bug #5783 FindFirst fails where search pattern == mangled filename.
Jeremy Allison [Tue, 23 Sep 2008 22:04:14 +0000 (15:04 -0700)]
Fix bug #5783 FindFirst fails where search pattern == mangled filename.
That was an old and subtle bug.
(cherry picked from commit 86a0c271ef467810810d1adda982bbb0dc8b928e)

10 years agoidmap_adex: Add new idmap plugin for support RFC2307 enabled AD forests.
Gerald (Jerry) Carter [Fri, 19 Sep 2008 17:27:15 +0000 (12:27 -0500)]
idmap_adex: Add new idmap plugin for support RFC2307 enabled AD forests.

The adex idmap/nss_info plugin is an adapation of the Likewise
Enterprise plugin with support for OU based cells removed
(since the Windows pieces to manage the cells are not available).

This plugin supports

  * The RFC2307 schema for users and groups.
  * Connections to trusted domains
  * Global catalog searches
  * Cross forest trusts
  * User and group aliases

Prerequiste: Add the following attributes to the Partial Attribute
Set in global catalog:

  * uidNumber
  * uid
  * gidNumber

A basic config using the current trunk code would look like

      idmap backend = adex
      idmap uid = 10000 - 29999
      idmap gid = 10000 - 29999
      winbind nss info = adex

       winbind normalize names = yes
       winbind refresh tickets = yes
       template homedir = /home/%D/%U
       template shell = /bin/bash
(cherry picked from commit 62785b8e2aa862b7eb85e20a11f7a29e1e8b2825)

10 years agoAttempt to fix bug 5778
Volker Lendecke [Sun, 21 Sep 2008 18:39:17 +0000 (20:39 +0200)]
Attempt to fix bug 5778

Jeff, Steve, please check!
(cherry picked from commit 110756cc7bcaed5a9d6aa58f3b3fe4481f8d1f31)

10 years agoWHATSNEW: Add changes since 3.3.0pre1.
Karolin Seeger [Sun, 21 Sep 2008 20:01:52 +0000 (13:01 -0700)]
WHATSNEW: Add changes since 3.3.0pre1.

(cherry picked from commit 9c464946c1f77a6f95da4a36fd590ec75734432d)

10 years agoAdd a comment for the bump of version
Simo Sorce [Fri, 19 Sep 2008 17:48:12 +0000 (13:48 -0400)]
Add a comment for the bump of version
(cherry picked from commit 91935b08aa38f3022b500424546d05a747d7ceb3)

10 years agoidmap: Increment the interface number after Volker's rewrite.
Gerald (Jerry) Carter [Thu, 18 Sep 2008 19:49:46 +0000 (14:49 -0500)]
idmap: Increment the interface number after Volker's rewrite.
(cherry picked from commit 387deb2ece6f4374990ab34a4682c773ee85943a)

10 years agoCorrectly get+set the NT ACL on a file. Now to make us check it on open..
Jeremy Allison [Wed, 17 Sep 2008 20:45:10 +0000 (13:45 -0700)]
Correctly get+set the NT ACL on a file. Now to make us check it on open..
(cherry picked from commit e60be05baff1a0d9f99cd2be8fbfd66e76893c1d)

10 years agoMark module experimental, fix crash bugs.
Jeremy Allison [Wed, 17 Sep 2008 19:33:40 +0000 (12:33 -0700)]
Mark module experimental, fix crash bugs.
(cherry picked from commit 299fbaad957d214f47bb468f751bb500bb1956a2)

10 years agoEnsure vfs_acl_xattr is built.
Jeremy Allison [Wed, 17 Sep 2008 19:20:57 +0000 (12:20 -0700)]
Ensure vfs_acl_xattr is built.
(cherry picked from commit c1e9061af54b02521c601a2fe788827ae6ea0759)

10 years agoEnsure all pointers are initialized. Without this we can crash when looking up a...
Jeremy Allison [Wed, 17 Sep 2008 18:59:57 +0000 (11:59 -0700)]
Ensure all pointers are initialized. Without this we can crash when looking up a non-existant uid.
(cherry picked from commit 3ebdbcae6f7a32952680a3c0687c410fe4004b01)

10 years Adapt script to changed directory structure.
Karolin Seeger [Wed, 17 Sep 2008 06:48:19 +0000 (08:48 +0200)] Adapt script to changed directory structure.

(cherry picked from commit b6b7aa023b62ab8994d13cb91d5185204c1500b2)

10 years agoMake the correct module name.
Jeremy Allison [Tue, 16 Sep 2008 23:59:22 +0000 (16:59 -0700)]
Make the correct module name.
(cherry picked from commit 7cd40b7e0ec77f70d79b19abb8bc9623a9efae31)

10 years agoFirst (incomplete) cut of this module. Based on Volker's original work.
Jeremy Allison [Tue, 16 Sep 2008 22:52:02 +0000 (15:52 -0700)]
First (incomplete) cut of this module. Based on Volker's original work.
(cherry picked from commit b1c55f5616b16a698a751a90fb209e0549332dc7)

10 years ago* Allow an admin to define the "uid" attribute for a RFC2307
Gerald (Jerry) Carter [Tue, 16 Sep 2008 17:41:55 +0000 (10:41 -0700)]
* Allow an admin to define the "uid" attribute for a RFC2307
  user object in AD to be the username alias.

For example:

  $ net ads search "(uid=coffeedude)"
  distinguishedName: CN=Gerald W. Carter,CN=Users,DC=pink,DC=plainjoe,DC=org
  sAMAccountName: gcarter
  memberOf: CN=UnixUsers,CN=Users,DC=pink,DC=plainjoe,DC=org
  memberOf: CN=Domain Admins,CN=Users,DC=pink,DC=plainjoe,DC=org
  memberOf: CN=Enterprise Admins,CN=Users,DC=pink,DC=plainjoe,DC=org
  memberOf: CN=Schema Admins,CN=Users,DC=pink,DC=plainjoe,DC=org
  uid: coffeedude
  uidNumber: 10000
  gidNumber: 10000
  unixHomeDirectory: /home/gcarter
  loginShell: /bin/bash

  $ ssh coffeedude@

  coffeedude@orville:~$ id
  uid=10000(coffeedude) gid=10000(PINK\unixusers) groups=10000(PINK\unixusers)

  $ getent passwd PINK\\gcarter

  $ getent passwd coffeedude

  $ getent group PINK\\Unixusers
(cherry picked from commit 7cdcf4dff2cb02ec16f4e78b85701cd2043be274)

10 years agoidmap_hash: Add the idmap/nss-info provider from Likewise Open.
Gerald (Jerry) Carter [Mon, 15 Sep 2008 20:51:44 +0000 (15:51 -0500)]
idmap_hash: Add the idmap/nss-info provider from Likewise Open.

* Port the Likewise Open idmap/nss_info provider (renamed to

* uids & gids are generated based on a hashing algorithm that collapse
  the Domain SID to a 31 bit number.  The reverse mapping from the
  high order 11 bits to the originat8ing sdomain SID is stored in
  a has table initialized at start up.

* Includes support for "idmap_hash:name_map = <filename>" for the
  name aliasing layer.  The name map file consist of entries in
  the form "alias = DOMAIN\name"
(cherry picked from commit 081787719590b319633e2bc34f747feabaf3c6fe)

10 years agowinbindd: Update the calls to ws_name_XX() to reflect API changes.
Gerald (Jerry) Carter [Mon, 15 Sep 2008 20:50:15 +0000 (15:50 -0500)]
winbindd: Update the calls to ws_name_XX() to reflect API changes.

* Ensures that all points an which a name is received or returned
  to/from a client passes through the name aliases layer (users
  and groups).
(cherry picked from commit 0a2c8ac3f6af38ebeb61a49c515bdc84591130cc)

10 years agowinbindd: Add support for name aliasing.
Gerald (Jerry) Carter [Mon, 15 Sep 2008 20:41:37 +0000 (15:41 -0500)]
winbindd: Add support for name aliasing.

* Add support user and group name aliasing by expanding
  the ws_name_replace() and ws_name_return() functions.
  The lookup path is
     aliases -> qualified name -> SID
     SID -> fully qualified name -> alias
  In other words, the name aliasing support is a thin layer
  built on top of SID/NAME translation.

* Rename the ws_name_XX() functions to normalize_name_map()
  and normalize_name_unmap().  Chaneg interface to return
  NTSTATUS rather than char *.

* Add associated cache validation functions.
(cherry picked from commit 1ed8c35a730a01a565762485fead8db9cce4c469)

10 years agoidmap_ad: Fix a segfault when calling nss_get_info() with a NULL ads structure.
Gerald W. Carter [Mon, 15 Sep 2008 17:38:36 +0000 (12:38 -0500)]
idmap_ad: Fix a segfault when calling nss_get_info() with a NULL ads structure.
(cherry picked from commit cc6d1c9a9fb4d97278af4d676f260c479b338638)

10 years agobuild: don't install the cifs.upcall binary twice.
Günther Deschner [Fri, 5 Sep 2008 12:01:45 +0000 (14:01 +0200)]
build: don't install the cifs.upcall binary twice.

(cherry picked from commit 1f44b4aaa5f700827ee2ab272ae4b59e559b094b)
(cherry picked from commit 020c03bff844ef976dd786a755c4d682bf161a3d)

10 years agobuild-docs: Add 'make clean'.
Karolin Seeger [Thu, 18 Sep 2008 13:52:06 +0000 (15:52 +0200)]
build-docs: Add 'make clean'.

(cherry picked from commit cf40fb97239ed9a11e5750fde6e078233e567bba)

10 years agoWHATSNEW: Update changes since 3.3.0pre1.
Karolin Seeger [Tue, 16 Sep 2008 10:51:10 +0000 (12:51 +0200)]
WHATSNEW: Update changes since 3.3.0pre1.

(cherry picked from commit 798f2887913505cc038ee8aad26d2d22dba1ead4)

10 years agocifs.upcall: make most functions static and silence compiler warnings
Jeff Layton [Sun, 14 Sep 2008 12:37:05 +0000 (08:37 -0400)]
cifs.upcall: make most functions static and silence compiler warnings silence -Wmissing-prototypes and some uninit'ed variable
warnings. Thanks to GD for the extra-paranoid compiler flags.

Signed-off-by: Jeff Layton <>
(cherry picked from commit 3bddd55319204c930e0bdd13eb2724ae10914a78)

10 years agoFix aio on FreeBSD.
Timur [Tue, 16 Sep 2008 01:43:59 +0000 (18:43 -0700)]
Fix aio on FreeBSD.
(cherry picked from commit 60db38a637c21074cc2692e9c999a7cd0dd7bba7)

10 years agoFix display of POSIX ACLs.
Timur [Tue, 16 Sep 2008 01:26:24 +0000 (18:26 -0700)]
Fix display of POSIX ACLs.
(cherry picked from commit cfcf1d697f4a88ec6e46d3736476639712bb0e90)

10 years agoFix cut and paste error in quota code.
Timur [Tue, 16 Sep 2008 01:21:32 +0000 (18:21 -0700)]
Fix cut and paste error in quota code.
(cherry picked from commit 02613c6ef0cf2eee69a48dff4c29cb1266abbfe3)

10 years agoSimple fix for warning:
Steven Danneman [Tue, 16 Sep 2008 00:54:21 +0000 (17:54 -0700)]
Simple fix for warning:

Compiling utils/sharesec.c
utils/sharesec.c: In function `change_share_sec':
utils/sharesec.c:404: warning: 'sd' might be used uninitialized in this function
(cherry picked from commit da582a6e5d95c54d284fbe9d713ede9ef8a9793d)

10 years agoFixed "uninitialized variable" build warning
Steven Danneman [Mon, 15 Sep 2008 23:21:04 +0000 (16:21 -0700)]
Fixed "uninitialized variable" build warning

With gcc 4.1.3 on Ubuntu 7.10 the following build warning occurs:

Compiling libnet/libnet_samsync_keytab.c
cc1: warnings being treated as errors
libnet/libnet_samsync_keytab.c: In function â\200\230fetch_sam_entries_keytabâ\200\231:
libnet/libnet_samsync_keytab.c:102: warning: â\200\230entry.enctypeâ\200\231 is used uninitialized in this function

Fixed by initializing to ENCTYPE_NULL
(cherry picked from commit 52f8463962d266d904b60919a6a40c0b76de34ef)

10 years agoFix build warning on FreeBSD
Steven Danneman [Mon, 15 Sep 2008 23:17:03 +0000 (16:17 -0700)]
Fix build warning on FreeBSD

Fix for the following build warning:

Compiling torture/cmd_vfs.c
torture/cmd_vfs.c: In function `cmd_open':
torture/cmd_vfs.c:275: warning: unsigned int format, different type arg (arg 3)
torture/cmd_vfs.c: In function `cmd_mknod':
torture/cmd_vfs.c:992: warning: unsigned int format, different type arg (arg 3)

sccanf had mismatched types for mode_t between formating parameter and var args.
(cherry picked from commit 86f6815c5d971ed5bc25f72a0faa29c143dcafba)

10 years agoFix bug 5761 "open of mangled directory name results in 'is a stream name'"
Jeremy Allison [Mon, 15 Sep 2008 21:14:18 +0000 (14:14 -0700)]
Fix bug 5761 "open of mangled directory name results in 'is a stream name'"
reported by Regan Heath <>.
(cherry picked from commit b06b8d5479566deb0e59050fd6b44f247de7cdf4)

10 years agoFix for bug 5571
Simo Sorce [Thu, 11 Sep 2008 13:51:39 +0000 (09:51 -0400)]
Fix for bug 5571
Make sure that usernames are parsed using the correct separator.
Otherwise group memeberships in winbind may be result broken.
(cherry picked from commit 346f08dba401aed08b83cbcf57cc9dd92421cc13)

10 years agoman cifs.upcall: Fix typo, wrap lines.
Karolin Seeger [Mon, 15 Sep 2008 14:33:16 +0000 (16:33 +0200)]
man cifs.upcall: Fix typo, wrap lines.

(cherry picked from commit c4f361a17f51e4897ac2faafc65ebc8349e19001)
(cherry picked from commit da7a60a82bfecbf5b1a10bdbccf4682fd92b65bb)
(cherry picked from commit 97452672b64e06e50372089765909a1112788df7)

10 years agolibnet_join: streamline logic of libnet_join_post_processing()
Michael Adam [Fri, 29 Aug 2008 15:55:28 +0000 (17:55 +0200)]
libnet_join: streamline logic of libnet_join_post_processing()

(cherry picked from commit 81cc1af1e699e454fbb1d12636d002f845231006)
(cherry picked from commit 3ea63ec10c37460253fbe68d63576e0cd8783c11)

10 years agolibnet: fix join by creating keytab after changing the config.
Michael Adam [Fri, 29 Aug 2008 15:43:12 +0000 (17:43 +0200)]
libnet: fix join by creating keytab after changing the config.

(cherry picked from commit 96d1c780bf9524b929e6026776602a5288aea73d)
(cherry picked from commit 298e5b663b1d6b469d130041dbed151801a45d1e)

10 years agonetapi: fix NetUserGetLocalGroups.
Günther Deschner [Fri, 12 Sep 2008 09:47:39 +0000 (11:47 +0200)]
netapi: fix NetUserGetLocalGroups.

(cherry picked from commit 5d91c9184c27def47f20fc089cc127d780387ed8)
(cherry picked from commit 32a66be9eef42078491c3dd286794fb89a122c15)

10 years agonetapi: fix NetGroupGetUsers (only enumerates users).
Günther Deschner [Fri, 12 Sep 2008 09:28:42 +0000 (11:28 +0200)]
netapi: fix NetGroupGetUsers (only enumerates users).

(cherry picked from commit a94318be4656a668be0295988ed0743105d830c9)
(cherry picked from commit 8adbc3c3a41a440f334aed86697fda50cfef3ffa)

10 years agonetapi: fix NetUserSetGroups.
Günther Deschner [Fri, 12 Sep 2008 09:28:03 +0000 (11:28 +0200)]
netapi: fix NetUserSetGroups.

(cherry picked from commit e8b27b69f33fb33c670026b3a24ed95a2f0099fe)
(cherry picked from commit 45199a07ddd615f7ef44d299100b3009291ac883)

10 years agonetapi: fix NetGroupSetUsers.
Günther Deschner [Fri, 12 Sep 2008 09:13:20 +0000 (11:13 +0200)]
netapi: fix NetGroupSetUsers.

(cherry picked from commit 735bc2e425ce629745495190cd1c721ccb583d24)
(cherry picked from commit 334ad5d9ff13fe0c727a83c26f4fa2bb8913be8e)

10 years agodoserr: add WERR_NO_SUCH_ALIAS.
Günther Deschner [Fri, 12 Sep 2008 08:12:01 +0000 (10:12 +0200)]
doserr: add WERR_NO_SUCH_ALIAS.

(cherry picked from commit e065802a61f22e9fdcd4b911805c42c46a79b3f2)
(cherry picked from commit e4246841e1923f2befb20f3a6d1140b86cebb4b6)

10 years agonet: use netapi for NetFileEnum.
Günther Deschner [Wed, 10 Sep 2008 08:34:28 +0000 (10:34 +0200)]
net: use netapi for NetFileEnum.

(cherry picked from commit f85dcf8112137b7ad07f2b51eeca598e9c4d0ffa)
(cherry picked from commit 66b2625e83937cc323ab56cb47dc534f59cb9d76)

10 years agonet: use netapi for NetFileClose.
Günther Deschner [Wed, 10 Sep 2008 08:34:13 +0000 (10:34 +0200)]
net: use netapi for NetFileClose.

(cherry picked from commit fd3d130d25a7c30fe003abe01fc18d8f754a466f)
(cherry picked from commit 23261c5ae19f9b7928e2dd37664f80acc873f1b1)

10 years agonetapi: implement NetFileEnum_r.
Günther Deschner [Wed, 10 Sep 2008 08:03:48 +0000 (10:03 +0200)]
netapi: implement NetFileEnum_r.

(cherry picked from commit fd66b72fd017013c83d36f5219192716eb17cacb)
(cherry picked from commit edfdd26df319afd11d05262872e489309b983f17)

10 years agonetapi: add NetFileEnum example code.
Günther Deschner [Tue, 9 Sep 2008 20:17:00 +0000 (22:17 +0200)]
netapi: add NetFileEnum example code.

(cherry picked from commit 32ee2dadab5b2579d53d0ecb106f0e64063da3f7)
(cherry picked from commit e0300a2e4d7a05e7c708d8e7fddea290044c1386)

10 years agonetapi: add NetFileEnum to public header.
Günther Deschner [Tue, 9 Sep 2008 20:16:07 +0000 (22:16 +0200)]
netapi: add NetFileEnum to public header.

(cherry picked from commit 50ce2a3d1a520bd1508110872e871c2c67e0f606)
(cherry picked from commit 2ae6e0fb45c9b8c59294de0d06f382cc88643bfe)

10 years agonetapi: add NetFileEnum skeleton.
Günther Deschner [Tue, 9 Sep 2008 20:01:32 +0000 (22:01 +0200)]
netapi: add NetFileEnum skeleton.

(cherry picked from commit 8113249fe3be2968257bd6a4a12153104d91132e)
(cherry picked from commit 18ec2b32fa5183c25e024caaa0e5901027c3b9d8)

10 years agore-run make idl.
Günther Deschner [Tue, 9 Sep 2008 19:59:36 +0000 (21:59 +0200)]
re-run make idl.

(cherry picked from commit 995dea40629883ae9ac2871eeb033a168a3b4935)
(cherry picked from commit c755179540e578b51d542c597c64c34f8bb9c54b)

10 years agonetapi: add NetFileEnum to IDL.
Günther Deschner [Tue, 9 Sep 2008 19:59:22 +0000 (21:59 +0200)]
netapi: add NetFileEnum to IDL.

(cherry picked from commit 5c234a53739d74d3cc80c4409aa32238541b31d6)
(cherry picked from commit 9320e2d1b20846a5395d1de32687a9ad0e4b2080)

10 years agonetapi: add NetFileGetInfo example code.
Günther Deschner [Tue, 9 Sep 2008 19:56:29 +0000 (21:56 +0200)]
netapi: add NetFileGetInfo example code.

(cherry picked from commit 66158036423f8e875921b7ba36f048033c3e98a6)
(cherry picked from commit 4b3c014243c2ac8a1e7e0e8693abbe621abb3b41)

10 years agonetapi: add NetFileGetInfo to public header.
Günther Deschner [Tue, 9 Sep 2008 19:56:04 +0000 (21:56 +0200)]
netapi: add NetFileGetInfo to public header.

(cherry picked from commit 5dd017b33f7d4154966aa3633d3ef3c8b482ca62)
(cherry picked from commit 37136e7c3566396161baf6a851d78a339b772bd4)

10 years agonetapi: implement NetFileGetInfo_r.
Günther Deschner [Tue, 9 Sep 2008 19:55:45 +0000 (21:55 +0200)]
netapi: implement NetFileGetInfo_r.

(cherry picked from commit de84049bc14d5c2061cdb701fd81a7fed1546eed)
(cherry picked from commit fbc2571a2ce4e3cb6ff2504d6e3ef0e891aec1e1)

10 years agonetapi: add NetFileGetInfo skeleton.
Günther Deschner [Tue, 9 Sep 2008 17:43:02 +0000 (19:43 +0200)]
netapi: add NetFileGetInfo skeleton.

(cherry picked from commit 6c61c2e35e60a7b1398533311dab5eee38eb3b09)
(cherry picked from commit 42343cb48193d3167827edee3cdcd82fd4d5eadb)

10 years agore-run make idl.
Günther Deschner [Tue, 9 Sep 2008 17:30:43 +0000 (19:30 +0200)]
re-run make idl.

(cherry picked from commit e82c7481a01283f446ccf5e34261835d5b69f969)
(cherry picked from commit 3e13f5b7f713fa60a13ae49668bdc069531be35c)