1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00

80176 Commits

Author SHA1 Message Date
Jelmer Vernooij
7ed9ebab83 provision: remove reference to no longer existing template files. 2012-05-03 13:41:24 +02:00
Andrew Bartlett
86b1dd845a s4-samba-tool: make new samba-tool group listmembers use samAccountName
This is the unique username value.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Thu May  3 01:57:41 CEST 2012 on sn-devel-104
2012-05-03 01:57:41 +02:00
Andrew Bartlett
a0a83802fb s4-s3upgrade: Force ldapsam:trusted = yes
While this setting is not the default in Samba3, any domain that is
in a suitable condition to upgrade to Samba4 should already be in the
layout that ldapsam:trusted uses.  It can be turned off by setting
ldapsam:trusted=false in the smb.conf.

Many upgrades to Samba4 happen on a different host to the old Samba3 domain
and this avoids the need to configure nss_ldap only for the duration of
the upgrade.

Andrew Bartlett
2012-05-03 08:09:09 +10:00
Lukasz Zalewski
9cd664b2e9 Extension to the samba-tool group subcommand functionality to allow listing of the members of an AD group 2012-05-03 08:09:09 +10:00
Andrew Bartlett
d2c8ebe2c7 s4-s3upgrade: Try harder to get group memberships on upgrade
This fixes an issue where some group types were not upgraded, as we
did not upgrade alias memberships.

It also uses enum_group_memberships() to try and find the memberships
from the other direction, by asking which groups a user is a member
of.  As Samba3 (and NT4) does not implement nested groups, this should
be safe.

Andrew Bartlett
2012-05-03 08:09:09 +10:00
Andrew Bartlett
926c0a6a33 s3-pypassdb: add wrapper for enum_group_memberships
This will be used in samba3upgrade to try and get the group memberships by instead asking
for the groups each user is in.  This reverse lookup may be more reliable, as this
is used at login time.

Andrew Bartlett
2012-05-03 08:09:09 +10:00
Andrew Bartlett
0ef06dd021 s3-pypassdb: remove unused variable 2012-05-03 08:09:09 +10:00
Michael Adam
ac1e1af8cc s4:torture:rpc: add a new test samba3.smb2-pipe-read-logoff
- open a pipe via smb2
 - trigger a read which hangs since there is nothing to read
 - do a logoff
 - wait for the read to return and check the status
   (STATUS_PIPE_BROKEN)

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed May  2 19:57:45 CEST 2012 on sn-devel-104
2012-05-02 19:57:45 +02:00
Michael Adam
1c14538f60 s4:torture:rpc: add a new test samba3.smb2.pipe-read-tdis
- open a pipe via smb2
 - trigger a read which hangs since there is nothing to read
 - do a tree disconnect
 - wait for the read to return and check the status
   (STATUS_PIPE_BROKEN)
2012-05-02 18:11:06 +02:00
Michael Adam
ecc28b8e5d s4:torture:rpc: add a test samba3.smb2-pipe-read-close
* open a pipe via smb2
* trigger a read which hangs since there is nothing to read
* close the pipe file handle
* wait for the read to reaturn and check the status
  (NT_STATUS_PIPE_BROKEN)
2012-05-02 18:11:05 +02:00
Michael Adam
e615c22bc2 s4:torture:rpc: fix a comment typo in samba3.smb2-reauth2 2012-05-02 18:11:05 +02:00
Michael Adam
f479d8ff59 s4:torture:rpc: remove an accidentially committed character (in a comment) 2012-05-02 18:11:04 +02:00
Andrew Bartlett
2b5ee3491a s3-passdb: Add extra debug on ID mapping failures
Signed-off-by: Michael Adam <obnox@samba.org>

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed May  2 15:34:13 CEST 2012 on sn-devel-104
2012-05-02 15:34:09 +02:00
Andrew Bartlett
bb1d541da1 s3-idmap: remove (now) unused function idmap_cache_set_sid2both()
Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 13:18:05 +02:00
Andrew Bartlett
c844f65779 s3-idmap: convert most idmap_cache callers to unixid API
This will eventually allow the struct unixid to be passed all the way up
and down the stack.

Andrew Bartlett

Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 13:18:03 +02:00
Andrew Bartlett
583b104d4b s3-idmap: Rework idmap_cache to store ID_TYPE_BOTH values
This required that the lower level cache store a UID/GID and a type, and that
we operate on struct unixid rather than just uid/gid.

The ID_TYPE_BOTH is then handled as being a positive mapping for both
a UID and GID value.  Wrapper functions are provided so that callers are not
changed in this patch.

Andrew Bartlett

Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 13:18:02 +02:00
Andrew Bartlett
0cad493412 s3-winbindd: Do not use WBC_ types internally in winbindd
Use the types from idmap.idl instead

Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 13:18:02 +02:00
Michael Adam
6e1f6e4956 s3:passdb: remove a forward declaration of wbcSidToUnixId that has become unnecessary 2012-05-02 13:17:54 +02:00
Michael Adam
f9c9c49c51 s3:passdb: rename sids_to_unix_ids() --> sids_to_unixids() for consistency 2012-05-02 12:45:30 +02:00
Andrew Bartlett
ac97f151ed s3-passdb: Use struct unixid in sids_to_unix_ids
This avoids the union in the struct wbcUnixId and moves us to using only struct unixid
internally.

Andrew Bartlett

Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 12:45:30 +02:00
Andrew Bartlett
2d5df933f4 s3-passdb: Rename legacy_sid_to_id -> legacy_sid_to_unixid for clarity
Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 12:45:29 +02:00
Andrew Bartlett
a6e29f23f0 s3-passdb: Change pdb_sid_to_id() to return struct unixid
This will make it easier to consistantly pass a struct unixid all the way up and
down the idmap stack, and allow ID_TYPE_BOTH to be handled correctly.

Andrew Bartlett

Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02 12:45:29 +02:00
Michael Adam
8026550115 selftest: make the knownfail patterns for the driver_info_winreg more specific
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed May  2 11:23:26 CEST 2012 on sn-devel-104
2012-05-02 11:23:25 +02:00
Andrew Bartlett
7b55ec290e s4-provision: Fix up --use-s3fs to create the directory for xattr.tdb
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May  2 04:45:05 CEST 2012 on sn-devel-104
2012-05-02 04:45:03 +02:00
Andrew Bartlett
b6b4364a3d s4-wintest: --use-s3fs in wintest 2012-05-02 10:53:51 +10:00
Andrew Bartlett
63f2d1060e s4-provision: Fix --use-s3fs to parse correctly 2012-05-02 10:53:51 +10:00
Andrew Bartlett
9712912dfc testsuite/libsmbclient: Remove unused and expensive-to-link testsuite
This testsuite never got off the ground, and unlike the other
libsmbclient tests, it is not integrated into make test, has no driver
script we could integrate.

As it has been in this state for 10 years, and adding it to the compile
did not find any link-time issues (particularly in comparison to the
link-time cost for so many individual binaries), I am now removing them.

The libsmbclient examples are seperate to this, and remain in
examples/libsmbclient.

Andrew Bartlett
2012-05-02 10:53:51 +10:00
Andrew Bartlett
3408c1ce6c selftest: 'store dos attributes = yes' is now set in fileserver.conf
As such, there is no need to set it or the permissions-based mappings here as well.

Andrew Bartlett
2012-05-02 10:53:51 +10:00
Andrew Bartlett
051042229d s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'
The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so
the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services.

Andrew Bartlett
2012-05-02 10:53:50 +10:00
Andrew Bartlett
692b3bfd7f file_server: set 'store dos attributes = yes'
This means we do not need the old permissions-based mappings.

Andrew Bartlett
2012-05-02 10:53:50 +10:00
Andrew Bartlett
5763301e26 selftest: run more raw.samba3 against secshare simple file server
This allows these tests to run in an environment where they can pass,
as they fail when ACL support is turned on in smbd.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May  2 02:51:27 CEST 2012 on sn-devel-104
2012-05-02 02:51:27 +02:00
Andrew Bartlett
6d87df2ac3 selftest: Run smbtorture tests being run against s3dc against plugin_s4_dc as well 2012-05-02 01:00:13 +02:00
Andrew Bartlett
53c70be468 selftest: Do not start samba4 srvsvc in plugin_s4_dc mode 2012-05-02 01:00:13 +02:00
Andrew Bartlett
45125a459a selftest: add hooks required for printing to Samba4.pm 2012-05-02 01:00:13 +02:00
Andrew Bartlett
c65bc4aa92 selftest: mark samba3.raw.samba3checkfsp as flapping on plugin_s4_dc
This fails on my Fedora 16 workstation, but passes on sn-devel.

Andrew Bartlett
2012-05-02 01:00:13 +02:00
Andrew Bartlett
c350422bfe selftest: mark samba3.raw.acls.inheritance(plugin_s4_dc) as flapping
This seems to succeed on sn-devel, but fails in a local make test on
my workstation.

Andrew Bartlett
2012-05-02 01:00:13 +02:00
Andrew Bartlett
ecc0ac5103 selftest: add knownfail entries for plugin_s4_dc tests 2012-05-02 01:00:13 +02:00
Andrew Bartlett
7905f97494 selftest: change knownfail to cope with running plugin_s4_dc as well 2012-05-02 01:00:13 +02:00
Andrew Bartlett
33bf3efe37 file_server: use embedded srvsvc 2012-05-02 01:00:12 +02:00
Andrew Bartlett
2e1a4f63eb file_server: Use the embedded winreg server 2012-05-02 01:00:12 +02:00
Andrew Bartlett
c3be5240e9 file_server: use embedded ntsvcs server 2012-05-02 01:00:12 +02:00
Andrew Bartlett
cb5c456d47 file_server: use embedded eventlog server 2012-05-02 01:00:12 +02:00
Andrew Bartlett
f956f04dd1 file_server: forward dssetup, but use embedded svcctl for s3fs 2012-05-02 01:00:12 +02:00
Andrew Bartlett
c0db57e748 selftest: Use same pattern for path to share as Samba3.pm
This helps as we declare tests that were previously targetted at Samba3 only.

Andrew Bartlett
2012-05-02 01:00:12 +02:00
Andrew Bartlett
154518a719 selftest: Add hideunread share to plugin_s4_dc 2012-05-02 01:00:12 +02:00
Andrew Bartlett
99ce5626dc selftest: run plugin_s4_dc with 'acl_xattr xattr_tdb streams_depot' VFS modules 2012-05-02 01:00:12 +02:00
Andrew Bartlett
546318b879 selftest: prepare to run smbtorture tests against plugin_s4_dc 2012-05-02 01:00:12 +02:00
Andrew Bartlett
5baf11307f selftest: attempt to test samba3hide in a different environment
This should ensure that the samba3hide test is still run and passes,
in a non-ACLed environment.

Andrew Bartlett
2012-05-02 01:00:12 +02:00
Andrew Bartlett
5f0707801a selftest: Enable ACL testing against the s3dc environment
Previously, ACL tests were skipped and the correct modules for ACL
testing were not loaded.

The addition of a knownfail entry for raw.samba3* tests is due to an
inconsitancy between the behaviour with and without ACL modules loaded
- posix chown calls appear to be ignored in this mode.

Andrew Bartlett
2012-05-02 01:00:12 +02:00
Andrew Bartlett
221c0e479d s3-smbd: Use security_session_user_level() rather than nt_token_check_sid()
This allows the unix.whoami test to pass when configured as part of the AD DC.

The struct auth_session_info is slightly different in the AD DC configuration
when using auth_samba4.  In particular, there is a distinction between Guest
and Anonymous logins.

Andrew Bartlett
2012-05-02 01:00:12 +02:00