1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-05 21:57:51 +03:00

54113 Commits

Author SHA1 Message Date
Volker Lendecke
117c19efa4 Implement pdb_enum_alias_memberships 2009-06-11 18:04:35 +02:00
Jelmer Vernooij
3174de69d5 Fix build with external talloc. 2009-06-11 16:31:07 +02:00
Andrew Bartlett
223b30f593 Fix build of recurusion fix in reopen_logs() 2009-06-11 19:08:33 +10:00
Nadezhda Ivanova
e9caf7d063 A script to compare the differences in nTSecurityDescriptor between 2 hosts
This script walks the schema, configuration and domain partitions of the locally
installed Ldb and a remote hosts and compares the descriptors disregarding the
difference in domain SID. The goal is to make sure a freshly provisioned Samba
has the correct descriptors so ACLs work correctly. It outputs the descriptors
in short SDDL, where the correct SIDs are to be replaced during provisioning.
Optionally it can be output as an LDIF file with the current local domain and
domain SIDs.
2009-06-11 18:54:32 +10:00
Andrew Bartlett
e5353ce95b Don't recurse in reopen_logs().
Use the state to avoid recursion in reopen_logs(), as DEBUG() can call
this function.

Andrew Bartlett
2009-06-11 18:54:32 +10:00
Volker Lendecke
6372bd695d Implement pdb_ads_set_aliasinfo 2009-06-10 23:57:49 +02:00
Volker Lendecke
baa47dd278 pdb_default_aliasinfo is just fine for pdb_ads right now 2009-06-10 23:57:49 +02:00
Volker Lendecke
96df53fdc7 Implement pdb_ads_lookup_rids 2009-06-10 23:08:09 +02:00
Volker Lendecke
6e9e0334ff Fix a segfault in pdb_ads_delete_user()
If a user comes from the passdb cache, priv is NULL
2009-06-10 23:08:09 +02:00
Tim Prouty
a9ec21cf21 s3: Prepare the first set of SMB_VFS_CREATE_FILE callers to take an smb_filename struct
Some of the callers required minimal changes, while others
(copy_internals) required significant changes.  The task is simplified
a little bit because we are able to do operations and checks on the
base_name when a stream isn't used.

This patch should cause no functional changes.

Volker, Jeremy: Please check
2009-06-10 13:13:27 -07:00
Tim Prouty
bddd7ad3dc s3: Add utility function for copying an smb_filename struct 2009-06-10 13:13:27 -07:00
Tim Prouty
5b2034f9c1 s3: Remove the now unused CFF_DOS_PATH flag
All paths are now unix paths, making this flag useless.

This flags argument is now unused and can be safely removed.
2009-06-10 13:13:27 -07:00
Tim Prouty
2481d8dcd0 s3: Remove unix_convert handling from createfile implementations 2009-06-10 13:13:27 -07:00
Tim Prouty
6088e554f5 s3: Make all callers of SMB_VFS_CREATEFILE call unix_convert first
This step is a requirement to change SMB_VFS_CREATEFILE to take an
smb_filename struct.
2009-06-10 13:13:26 -07:00
Tim Prouty
ab779f5c34 s3: Remove extraneous calls to unix_convert
Not only are these unnecessary in spirit because unlink_internals
calls unix_convert, but in practice the return value is simply being
ignored right now.
2009-06-10 13:13:26 -07:00
Tim Prouty
fc2a3b66db s3: Remove unused stat structs being passed to SMB_VFS_CREATE_FILE 2009-06-10 13:13:26 -07:00
Günther Deschner
b152afeade s3-libwbclient: fix unresolved symbols in libwbclient.
Kai, please check.

Guenther
2009-06-10 21:25:58 +02:00
Günther Deschner
27bb7ac5d1 lib-util: move set_blocking() call into own file.
Guenther
2009-06-10 21:25:57 +02:00
Jeremy Allison
dc5c7b7f98 Make ctemp async. Fix the test to pass against W2K3.
Jeremy.
2009-06-10 11:58:00 -07:00
Günther Deschner
29b78b33d3 s3-build: Fix make test_shlibs and test_nss_modules.
Guenther
2009-06-10 17:26:59 +02:00
Jeff Layton
ddad58fc41 mount.cifs: explicitly handle non AF_INET/AF_INET6 addresses
If we get a non-AF_INET(6) address, then just skip it and try the next
one in the list.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
2009-06-10 09:00:21 -04:00
Karolin Seeger
ad0d803206 s3/docs: Fix typos.
Fix typos reported by OPC oota <t-oota [at] dh.jp.nec.com>.
Thanks!

Karolin
2009-06-10 08:39:35 +02:00
Andrew Tridgell
c6f5e1ba84 fixed some places where RPC-SECRETS needs to be changed to RPC-LSA-SECRETS
this copes with a rename of SECRETS to LSA-SECRETS in an earlier patch
by gd
2009-06-10 12:24:12 +10:00
Andrew Tridgell
a5003de56b fixed the encoding/decoding of the reverse attribute for server side sort 2009-06-10 11:45:53 +10:00
Andrew Tridgell
d42019644b added asn1 functions for handling booleans in a simple context 2009-06-10 11:45:53 +10:00
Donald T. Davis
9e7501b2cb Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005
Compiled with Andrew over a series of phone calls and gobby sessions,
with the aim of documenting Kerberos requirements for Samba to us an
alternate (ie, MIT) Kerberos library.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-06-10 11:38:27 +10:00
Andrew Bartlett
fbde0011e6 Remove copy of kerberos-notes.txt added in incorrect location 2009-06-10 11:37:49 +10:00
Donald T. Davis
8e1b848aed Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005
Compiled with Andrew over a series of phone calls and gobby sessions
with Andrew, with the aim of documenting Kerberos requirements for
Samba to us an alternate (ie, MIT) Kerberos library.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-06-10 11:19:18 +10:00
Andrew Tridgell
6836b16dda fixed server side sort control
when sorting a record that does not have the requested sort attribute
then put those records last in the sort result
2009-06-10 10:33:53 +10:00
Andrew Tridgell
48dbfc89cf fixed server side sorting of case-insensitive strings
The sort module uses ldb_comparison_fold() as the comparison function
for case-insensitive attributes. In other places the function is being
used to produce a boolean, but for sorting we care about ordering.

The n1 - n2 return was sorting by length, not value
2009-06-10 10:13:55 +10:00
Volker Lendecke
b660e51dec If there are no mods, don't bother the ldap server 2009-06-09 22:40:36 +02:00
Volker Lendecke
078443bc67 Some more fields in pdb_ads_init_ads_from_sam() 2009-06-09 22:40:36 +02:00
Timur I Bakeyev
fae921e938 Fix installation path of the subunit python modules.
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2009-06-09 21:54:05 +02:00
Jelmer Vernooij
6b0e6fc0b3 s4-tests: Add separate variable for tap2subunit. 2009-06-09 21:54:05 +02:00
Volker Lendecke
9af9a43464 Do not pull samAccountName twice 2009-06-09 21:46:30 +02:00
Stefan Metzmacher
a18341dab9 s3:smbd: only check the next_status for related requests
metze
2009-06-09 19:51:03 +02:00
Stefan Metzmacher
66acfbffeb s3:smbd: response with the same SMB2 flags as given by the client
...but also add the response flag.

metze
2009-06-09 19:51:03 +02:00
Stefan Metzmacher
4ae8bf09e6 s3:smbd: only pass the chained file handle for related compounded SMB2 requests
metze
2009-06-09 19:51:03 +02:00
Stefan Metzmacher
3d220f9fce s3:smbd: make sure we pad compounded SMB2 responses to 8 bytes
metze
2009-06-09 19:51:02 +02:00
Stefan Metzmacher
c8b3030f40 s3:smbd: skip file handle checks for SMB2 compounded requests
metze
2009-06-09 19:51:02 +02:00
Stefan Metzmacher
c0b64051d3 s3:smbd: more validation of the incoming SMB2 requests
metze
2009-06-09 19:51:02 +02:00
Stefan Metzmacher
915892e0da s3:smbd: for now ignore all non NBT Session Message requests for SMB2
metze
2009-06-09 19:51:01 +02:00
Stefan Metzmacher
6c44cc11b9 s3:smbd: don't include 1 byte padding for the dynamic buffer of SMB2 responses
It seems that Windows 2008 and Windows 7 doesn't do this anymore.

metze
2009-06-09 19:51:01 +02:00
Stefan Metzmacher
7c58a2f237 SMB2-COMPOUND: add some tests for invalid requests
TODO: check why the INVALID1 tests fails with --signing=required.

metze
2009-06-09 19:33:47 +02:00
Stefan Metzmacher
8d95883908 s4:smb2srv: don't allow the related flag on the first request in a compounded chain
metze
2009-06-09 19:33:46 +02:00
Sam Liddicott
ebf5523b6e s4: smbcli_transport_send hit the socket right away if possible
[Metze; "make test" on git master outputs exactly the same test summary
with our without this patch (apart from the "using seed" lines)]

If the transport socket is writable, then push the queue along
rather than wait until the caller returns back to the tevent loop.

This strategy keeps the sockets piping hot, and is particularly good
for cases where reading requests from one socket causes lots of
writes on another socket, or where lots of writes are made in a batch.

It doesn't matter if the socket is not writeable yet, packet_queue_run
will return quite cheaply in such a case.

Signed-off-by: Sam Liddicott <sam@liddicott.com>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-06-09 18:51:31 +02:00
Kai Blin
38cd0e086f net: Only use the in memory ccache when not already using a kerberos ticket in net ads 2009-06-09 18:09:18 +02:00
Stefan Metzmacher
ba42cccf00 s4:torture: add SMB2-COMPOUND test
metze
2009-06-09 16:49:33 +02:00
Stefan Metzmacher
959503ed1a s4:smb2srv: correctly fail remaining compounded requests after a failure
metze
2009-06-09 16:49:32 +02:00
Stefan Metzmacher
f55091586d s4:smb2srv: remove old TODO comment, we already check the seqnum
metze
2009-06-09 16:49:31 +02:00