1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-14 19:24:43 +03:00

16306 Commits

Author SHA1 Message Date
Gerald Carter
1aeeb432c7 BUG 1023: surround get_group_from_gid() with become_unbecome_root() block -
Volker Lendecke
2df6750a07 This restructures lib/afs.c so that the token data can be but into a
stream. This is to implement wbinfo -k that asks winbind for authentication
which then creates the AFS token for the authenticated user.

Volker
-
Volker Lendecke
c814f7c43d Cosmetic: Fix a const warning.
Volker
-
Jeremy Allison
de2f149e9e Reformat in preparation for EA dosmode attributes.
Jeremy
-
Herb Lewis
4b737b51a5 fix typo -
Volker Lendecke
aa220cffa7 Apply some const -
Volker Lendecke
2b757b6adf Remove some unused code -
Jeremy Allison
8cc10a6c05 Added support for OS/2 EA's in smbd server. Test with smbtorture eatest.
New protocol option "ea support" to turn them on (off by default). Conrad
at Apple may like this as it allows MacOS resource forks to be stored on
a file. Passes valgrind. Documentation to follow.
Jeremy.
-
Jeremy Allison
43db249fb8 Ensure we cope correctly with ea length of zero. Detect torture fail correctly.
Jeremy.
-
Volker Lendecke
6bc88d91e5 Merge a fix from HEAD to 3_0
Volker
-
Volker Lendecke
8037750df5 Apply some const -
Jeremy Allison
73433dc349 Committed test code by mistake... removing.
Jeremy.
-
Jeremy Allison
01fb871762 Setting EA's to zero length deletes them.
Jeremy.
-
Jeremy Allison
0d239a9c07 Fix get/set of EA's in client library. Added torture test for it.
Jeremy.
-
Volker Lendecke
9cb6b10efa Without words... -
Volker Lendecke
558b5bc1d8 Some fixes to expand_msdfs module.
Volker
-
Andrew Tridgell
9d1a08d65c merge tdb changes from samba4 - this means tdb is now under the LGPL, as discussed and agreed previously -
Andrew Bartlett
43c71b3202 Let the comment match the function...
Andrew Bartlett
-
Andrew Bartlett
4b9c50db85 Revert bogus part of smb signing commit - when Win2k supports singing/SPNEGO,
it does sign the first packet.

Andrew Bartlett
-
Andrew Bartlett
e5422d7413 Add a few comments explaining KEY_EXCH
Andrew Bartlett
-
Andrew Bartlett
1e91cd0cf8 Based on the detective work of Jianliang Lu <j.lu@tiesse.com>, allow yet
another NTLMv2 combination.

We should allow the NTLMv2 response to be calculated with either the domain
as supplied, or the domain in UPPER case (as we always did in the past).

As a client, we always UPPER case it (as per the spec), but we also
make sure to UPPER case the domain, when we send it.  This should give
us maximum compatability.

Andrew Bartlett
-
Andrew Bartlett
414d3fdc75 Make it clearer that this error refers to the peer, as this code is in both
the client and server.

Andrew Bartlett
-
Andrew Bartlett
e27b5cbe75 Merge from HEAD the SMB signing patch that I developed a couple of weeks
ago.

This patch re-adds support for 'optional' SMB signing.  It also ensures that
we are much more careful about when we enable signing, particularly with
on-the-fly smb.conf reloads.

The client code will now attempt to use smb signing by default, and disable
it if the server doesn't correctly support it.

Andrew Bartlett
-
Andrew Bartlett
01fff20e6e Ensure we correctly set cli->nt_pipe_fnum on failure to correctly open the
NT session.

Andrew Bartlett
-
Andrew Bartlett
3f9177bd5d As I raised (without objection) on the mailing list a while back, this
patch removes the 'unicode' smb.conf option.

Clients are as always free not to negotiate unicode, but Samba will always
accept unicode in smbd.

Setting 'unicode = no' caused me more client BSODs than any other option
I have seen, and I really want to protect some of our more silly users, who
will, no matter what, select and change every option...

Andrew Bartlett
-
Jeremy Allison
5eeeee302c Working (tested) client code for setting EA's by filename and fnum.
Now for parsing out the retrieved EA's.
Jeremy.
-
Jeremy Allison
6ca158291c Fix bug #1211. Ensure accept socket is in non-blocking state in case of network
error after select() returns true. (See accept man page on Linux). Patch from
rabies@meep.org (Richard Garnish).
Jeremy.
-
Volker Lendecke
9cb6a4d76f Move the Client-IP based msdfs target expansion to a VFS module.
Volker
-
Jeremy Allison
8431b985d6 Always use strchr_m, not strchr on unix character sets.
Jeremy.
-
Volker Lendecke
8e237d533e After briefly talking to jerry, commit this:
Redirect clients to shares based on the the client's IP address. The msdfs
link has the following form:

temp1 -> msdfs:@/data/tmp/redir@\temp

The file /data/tmp/redir has the contents:

192.168.234.128 closest
192.168.234 close
        default

Everything in between the @-signs in the link target is replaced by the
substituion in the file.

Jerry, errors in the filename expansion are now answered with
NT_STATUS_OBJECT_NAME_NOT_FOUND

Volker
-
Gerald Carter
ab48af6993 source code fix for bug 1095 -- honor the '-l' option -
Jim McDonough
bc13e35db0 Use timegm, or our already existing replacement instead of timezone, as
some platforms (FreeBSD in this case) don't define timezone according to
posix.  This is what I wanted to do anyway.

Spotted by Andrzej Tobola <san@iem.pw.edu.pl>
-
Gerald Carter
641c2acd92 jra's patch -- fix anonymous self referral code to check that a share is an msdfs root first -
Tim Potter
98a25dcda8 Path for bugzilla #1152 from Timur Bakeyev. Allow python modules to
build despite libraries added to LDFLAGS instead of LDPATH.
-
Gerald Carter
c335cb80d2 fixes for prnadmin.dll API
* force the PRINTER_ATTRIBUTE_LOCAL (nor PRINTER_ATTRIBUTE_NETWORK)
  * ensure that we return the sec_desc in smb_io_printer_info_2
    (allows prnui.dll to restore security descriptors from a data file).
-
Jim McDonough
c2436c433a Fix bugzilla # 1208
Winbind tickets expired.  We now check the expiration time, and acquire
new tickets.  We couln't rely on renewing them, because if we didn't get
a request before they expired, we wouldn't have renewed them.  Also, there
is a one-week limit in MS on renewal life, so new tickets would have been
needed after a week anyway.   Default is 10 hours, so we should only be
acquiring them that often, unless the configuration on the DC is changed (and
the minimum is 1 hour).
-
Stefan Metzmacher
5bf8f1b31b change my email address to the samba.org one
metze
-
Jeremy Allison
b0c109c403 Added cli_set_ea(), cli_get_ea next...
Jeremy.
-
Gerald Carter
ab509c74ba adding commit messages for recent changes -
Gerald Carter
170c443b19 remove unused variable -
Gerald Carter
97a24d1389 missed one on BUG 1195; make sure to set the private * to NULL -
Gerald Carter
8d6e370313 BUG 1185: use 'winbind cache time' as the reconnect period when seq_num == -1 rather than multiplying it by 8 (the default cache time is 5 minutes now) -
Gerald Carter
4449e0e251 bug 1195: add flag to ADS_STRUCT so we know who owns the main structure's memory (not the members though) -
Andrew Bartlett
d0b820562b Given how often a panic has to do with malloc() problems, don't tempt
things more by calling SAFE_FREE() just before we exit our panic handler.

Andrew Bartlett
-
Gerald Carter
2426bb4906 removing duplicate smbprint example script -
Jeremy Allison
a6045c904f Fix for #1064 - ensure truncate attribute checking is done correctly on "hidden" dot files.
Jeremy.
-
Gerald Carter
f3556724ab starting WHATSNEW for 3.0.3pre2 -
Gerald Carter
a90c3bd281 BUG 417: fix %UuGg variables expansion in include lines setging the current_user_info struct in register_vuid() -- shouldn't be any more broken than we were -
Gerald Carter
a6ed306d11 removing working when install swat since the installswat.sh is fixed now -
Gerald Carter
3aac1e549e missed some of Derrel's changes -