1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00

59127 Commits

Author SHA1 Message Date
Simo Sorce
1f2e9e90bd s4:PAC make common functions public 2010-01-27 14:03:06 -05:00
Simo Sorce
82a80b7f71 s4:PAC Streamline pac-glue step 2
Split functions so that no assumption is made about which plugin
is using them
2010-01-27 14:03:06 -05:00
Simo Sorce
85e3561dc9 s4:PAC Streamline pac-glue
First step, preparing to share the code between multiple plugins.
2010-01-27 14:03:06 -05:00
Björn Jacke
6bade10a1e s3: get pthread detection also on HP-UX right 2010-01-27 18:59:16 +01:00
Nadezhda Ivanova
dffb5ad2bf Implemented net fsmo command for transferring fsmo roles
The command allows the user to transfer a fsmo role to the server to which
the connection is established. Roles can be transferred or seized. By default a
transfer is attempted even if seize option is chosen, as it is dangerous to
seize a role if the current owner is still running.
example use:
net fsmo show --host=hostnameoraddress --username=username --password=password
net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password
net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force]

Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
Günther Deschner
0e2d1cf9c4 s4-smbtorture: pick correct last packet while checking backchannel replies in RPC-SPOOLSS-NOTIFY.
Guenther
2010-01-27 15:04:00 +01:00
Günther Deschner
1ead83947f s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the buildfarm.
Guenther
2010-01-27 13:40:16 +01:00
Michael Adam
098fc8c09c s4:torture: refactor querying of domain info out into test_QueryDomainInfo2_level()
Used in several places.

(Note: The _level suffix in the function name is just because
test_QueryDomainInfo2() already exists as an overall test for all levels.)

Michael

Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27 11:24:42 +01:00
Michael Adam
0a33b20f70 s4:torture: create new test_SetDomainInfo_ntstatus()
for checking for SetDomainInfo giving a desired return code.

Michael

Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27 11:24:42 +01:00
Michael Adam
c1d157a481 s4:torture: refactor setting of domain inf out into test_SetDomainInfo()
and use it in several places.

Michael

Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27 11:24:42 +01:00
Michael Adam
50a46cff76 s4:torture: refactor setting account flags out into test_SetUserInfo_acct_flags()
and use this in four places (enabling/disabling accounts).

Michael

Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27 11:24:42 +01:00
Jeremy Allison
899bd0005f Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write.
Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability
to allow Linux threads under different euids to send signals to each other.

Jeremy.
2010-01-26 16:51:57 -08:00
Lars Müller
2dd301e5cd Add dependency of bin/smbfilter to libwbclient. 2010-01-26 22:54:15 +01:00
Andreas Schneider
dee1b41ae7 s4-libcli: Fixed a talloc_reference error.
Signed-off-by: Andreas Schneider <asn@redhat.com>
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-26 17:14:51 +01:00
Stefan Metzmacher
137fd79f44 s4:winsrepl.idl: add random interface uuid
This is needed to include the wrepl interface into
ndrdump.

metze
2010-01-26 15:23:24 +01:00
Stefan Metzmacher
601642d923 s4:smbtorture: add BASE-BENCH-HOLDOPEN
This is useful for manual performance testing with a large
number of share mode entries.

metze
2010-01-26 15:23:24 +01:00
Jeff Layton
a0c31ec1c8 mount.cifs: don't allow it to be run as setuid root program
mount.cifs has been the subject of several "security" fire drills due to
distributions installing it as a setuid root program. This program has
not been properly audited for security and the Samba team highly
recommends that it not be installed as a setuid root program at this
time.

To make that abundantly clear, this patch forcibly disables the ability
for mount.cifs to run as a setuid root program. People are welcome to
trivially patch this out, but they do so at their own peril.

A security audit and redesign of this program is in progress and we hope
that we'll be able to remove this in the near future.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
2010-01-26 08:15:41 -05:00
Jeff Layton
a065c177df mount.cifs: check for invalid characters in device name and mountpoint
It's apparently possible to corrupt the mtab if you pass embedded
newlines to addmntent. Apparently tabs are also a problem with certain
earlier glibc versions. Backslashes are also a minor issue apparently,
but we can't reasonably filter those.

Make sure that neither the devname or mountpoint contain any problematic
characters before allowing the mount to proceed.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
2010-01-26 08:15:41 -05:00
Jeff Layton
3ae5dac462 mount.cifs: take extra care that mountpoint isn't changed during mount
It's possible to trick mount.cifs into mounting onto the wrong directory
by replacing the mountpoint with a symlink to a directory. mount.cifs
attempts to check the validity of the mountpoint, but there's still a
possible race between those checks and the mount(2) syscall.

To guard against this, chdir to the mountpoint very early, and only deal
with it as "." from then on out.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
2010-01-26 08:15:41 -05:00
Günther Deschner
7148eff0b7 s4-smbtorture: also test smbc_getOptionUseCCache 2010-01-26 12:11:28 +01:00
Volker Lendecke
08fa57335a s3: Enable use of ccache by default for libsmbclient
Disable this by setting the environment variable LIBSMBCLIENT_NO_CCACHE, which
has the advantage over an smb.conf option to be easily settable per
application.
2010-01-26 11:45:56 +01:00
Jeremy Allison
1e2e92f54d Correct fix for unused variable return from ndr_decode. Use it :-).
Jeremy.
2010-01-25 17:38:55 -08:00
Jeremy Allison
2fff1e13f1 Revert "s3: remove unused Variable"
This reverts commit 9536d94d5478b63fc05047964b40d8786a7246c4.

Bjorn, your change removed the ndr_decoding of the dos attribute.
Not a good idea :-).

Jeremy.
2010-01-25 17:06:54 -08:00
Björn Jacke
e87adf523b Revert "libreplace: fix unused varibale warning on IRIX"
this one was broken
2010-01-26 01:16:37 +01:00
Björn Jacke
5439e1a03f s3: fix detection and flags for using pthread
I hope this fixes the build on Tru64, IRIX and maybe bug #6983
2010-01-26 00:19:10 +01:00
Björn Jacke
60a3086d78 s3: remove unused variable 2010-01-26 00:19:10 +01:00
Björn Jacke
38be40f63c s3:async_smb: remove unused variable 2010-01-26 00:19:10 +01:00
Björn Jacke
b6839e1bfd libreplace: fix unused varibale warning on IRIX 2010-01-26 00:19:10 +01:00
Björn Jacke
9536d94d54 s3: remove unused Variable
Jeremy, please check!
2010-01-26 00:19:10 +01:00
Björn Jacke
55d448254a s3:netapi: remove unused variable 2010-01-26 00:19:09 +01:00
Karolin Seeger
463aa06442 lib/popt: Fix typo in README.
Karolin
2010-01-25 19:54:24 +01:00
Karolin Seeger
a3420bf7a5 s3/docs: Fix typo.
Karolin
2010-01-25 19:53:42 +01:00
Karolin Seeger
9ce9fdd9f4 s3/registry: Fix typo in comment.
Karolin
2010-01-25 19:50:21 +01:00
Volker Lendecke
005bbd0826 Revert "libcli/security: Remove a call to strncasecmp"
This reverts commit 7c687665eaf16b0c6f83c130f6d9e5459e0b2a32.
2010-01-25 16:45:32 +01:00
Volker Lendecke
d86d5be636 Revert "libcli/security: Convert some strtol calls to strtoul"
This reverts commit 7fe66e06c4df575c410d4d70ff38f120c2f4363b.
2010-01-25 16:45:32 +01:00
Volker Lendecke
fa47dbb57a Revert "libcli/security: Fix a valgrind error in dom_sid_parse"
This reverts commit f1c889a4e61d6d751cbabd8014b4345b8051b97c.
2010-01-25 16:45:31 +01:00
Jelmer Vernooij
4291e28a93 s4-python: Fix formatting. 2010-01-25 15:18:02 +01:00
Jelmer Vernooij
0b7910b8bf upgrade_from_s3: Remove unused imports. 2010-01-25 15:18:01 +01:00
Jelmer Vernooij
8562bbdce5 pyxattr: Move to the same directory as the xattr code. 2010-01-25 15:18:01 +01:00
Kai Blin
b35dcd7a18 s4 includes: Include system/locale.h to get access to <ctype.h> 2010-01-25 14:31:33 +01:00
Volker Lendecke
2024d4fb27 Revert "s3: Make string_to_sid a wrapper around dom_sid_parse"
This reverts commit dff03b61fd5d923562711b38cc7dbe996dc07283.
2010-01-25 12:41:48 +01:00
Volker Lendecke
a53a8ec452 Revert "libcli/security: Prohibit SID formats like S-1-5-32-+545"
This reverts commit 1fbeae41655b8305834f2149b1268077eba8633d.

Apparently this breaks the build of Samba4
2010-01-25 12:40:51 +01:00
Günther Deschner
b5d4726316 s4-smbtorture: test wbcResolveWinsByName/wbcResolveWinsByIP in WINBIND-WBCLIENT testsuite.
Guenther
2010-01-25 11:20:06 +01:00
Günther Deschner
e16e75a4f0 s4-smbtorture: add test for wbcPingDc to WINBIND-WBCLIENT testsuite.
Volker, please check, you know best how this interface is designed :-)

Guenther
2010-01-25 11:20:06 +01:00
Günther Deschner
5dfec4f36b s4-smbtorture: split spoolss_RemoteFindFirstPrinterChangeNotifyEx test into smaller parts.
Guenther
2010-01-25 11:20:06 +01:00
Günther Deschner
818fb00381 testprogs: print all driver info levels in spoolss testsuite.
Guenther
2010-01-25 11:20:06 +01:00
Volker Lendecke
4eb1523d87 s3-libsmbclient: Add smbc_setOptionUseCCache()
Can we enable this by default? This would be a change in behaviour, but this
feature is just too cool for everyone to catch up in the apps.

The patch would be
2010-01-24 20:32:17 +01:00
Volker Lendecke
dc1bcec73c s3: Add --use-ccache to net 2010-01-24 20:32:17 +01:00
Volker Lendecke
aa837d4aee s3: add libnetapi_set_use_ccache() 2010-01-24 20:32:17 +01:00
Volker Lendecke
bff48738a8 s3: Fix a bug in net's use of popt
In order to add --use-ccache to net, I added another "bool opt_ccache;" to
struct net_context. popt did not like this, it took a while to figure out why.
Popt has the lines

    /* XXX Check alignment, may fail on funky platforms. */
    if (arg == NULL || (((unsigned long)arg) & (sizeof(*arg)-1)))
        return POPT_ERROR_NULLARG;

The "bool opt_ccache;" was not aligned anymore...
2010-01-24 20:32:17 +01:00