sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00
Code
19,743 Commits 60 Branches 1,146 Tags
Commit Graph

19743 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Günther Deschner
8b2ba11508 r15240: Correctly disallow unauthorized access when logging on with the 
kerberized pam_winbind and workstation restrictions are in effect.

The krb5 AS-REQ needs to add the host netbios-name in the address-list.

We don't get the clear NT_STATUS_INVALID_WORKSTATION code back yet from
the edata of the KRB_ERROR but the login at least fails when the local
machine is not in the workstation list on the DC.

Guenther
 2007-10-10 11:16:29 -05:00
Günther Deschner
77407c0219 r15229: Save useless roundtrips in pam_auth (fallback to samlogon) when we know 
that the DC is not available.

Guenther
 2007-10-10 11:16:29 -05:00
Günther Deschner
e85558f4a4 r15228: Fix -n winbind option which has become meaningless with the persistent 
cache.

Guenther
 2007-10-10 11:16:29 -05:00
Volker Lendecke
4fa5dbcc8d r15227: Fix a valgrind error. We are marshalling here, not unmarshalling. 
Jeremy, can you check this? This was part of your -O6 on 64bit sweep.

Volker
 2007-10-10 11:16:29 -05:00
Paul Green
a1c12d7949 r15218: Update Makefile.in to avoid building libmsrpc.so on systems that do not support shared libraries. 2007-10-10 11:16:29 -05:00
Jeremy Allison
bea87e2df4 r15216: Fix the build for machines without krb5. Oops, sorry. 
Jeremy.
 2007-10-10 11:16:29 -05:00
Jeremy Allison
37ab42afbc r15210: Add wrapper functions smb_krb5_parse_name, smb_krb5_unparse_name, 
smb_krb5_parse_name_norealm_conv that pull/push from unix charset
to utf8 (which krb5 uses on the wire). This should fix issues when
the unix charset is not compatible with or set to utf8.
Jeremy.
 2007-10-10 11:16:28 -05:00
Günther Deschner
e55e1e1e96 r15198: Mention the auditing tool in "net rpc help". 
Guenther
 2007-10-10 11:16:28 -05:00
Paul Green
eb53f01863 r15196: Update a comment that I found confusing (I confuse easily). 2007-10-10 11:16:28 -05:00
Günther Deschner
ba81b508ca r15194: We need to be able to join as PDC as well. Thanks to Andrew Bartlett. 
Guenther
 2007-10-10 11:16:28 -05:00
Lars Müller
1ff6ae68b6 r15180: Use tdb_lock_bystring_with_timeout(). 2007-10-10 11:16:28 -05:00
Volker Lendecke
74511aed22 r15175: Try to get Stratus VOS back to build. Thanks, Paul. 
Volker
 2007-10-10 11:16:28 -05:00
Volker Lendecke
c4cdb8086a r15174: Check in Ronan Waide's wbinfo -i. Thanks :-) 
Volker
 2007-10-10 11:16:28 -05:00
Volker Lendecke
bb8c69162f r15173: Fix a non-critical memleak 2007-10-10 11:16:27 -05:00
Gerald Carter
e6a1106820 r15170: don't check for ccache 2007-10-10 11:16:27 -05:00
Gerald Carter
b8160fdf87 r15169: openldap2-devel is a suse package (not on RHEL) 2007-10-10 11:16:27 -05:00
Gerald Carter
81f3fa0138 r15168: last minute spec file fix for some change with the using_samba install path 2007-10-10 11:16:27 -05:00
Gerald Carter
220cf41bc1 r15165: updates for RH 9 packages (merged from RHEL fixes) 2007-10-10 11:16:27 -05:00
Gerald Carter
e3763272c3 r15163: packaging updates for RHEL/Fedora and break out 'pre' tag to the RPM release number 2007-10-10 11:16:27 -05:00
Jeremy Allison
dcef65acb5 r15162: Patch for bug #3668. Windows has a bug with LARGE_READX 
where if you ask for exactly 64k bytes it returns 0.
Jeremy.
 2007-10-10 11:16:27 -05:00
Jeremy Allison
dcbece8254 r15160: Fix from William Jojo I thought had already been added (but 
hadn't).
Jeremy.
 2007-10-10 11:16:26 -05:00
Gerald Carter
d6940c09cc r15154: bump version to 3.0.23pre2 2007-10-10 11:16:26 -05:00
Alexander Bokovoy
f068862e56 r15152: Fix a case when target is offline. Jerry, this needs to be in 3.0.23pre1 2007-10-10 11:16:26 -05:00
Günther Deschner
37d03695c6 r15150: Adding winbind debug class to the main daemon. 
Guenther
 2007-10-10 11:16:26 -05:00
Jeremy Allison
1b73e699e1 r15141: Fix for #3592 inspired by Justin Best <justinb@pdxmission.org>. 
Ignore a file in a tar output if the first read fails. Also
cope with <2GB read fail.
Jeremy.
 2007-10-10 11:16:26 -05:00
Jeremy Allison
3c260bcce2 r15138: Teach Samba the difference between exclusive and batch oplocks. 
Pass Samba4 oplock test (with kernel oplocks off).
Jeremy.
 2007-10-10 11:16:26 -05:00
Volker Lendecke
0ef5e4372c r15137: Refuse to join if our netbios name is longer than 15 chars. I think this is 
sufficient to fix bug #3659.

Volker
 2007-10-10 11:16:26 -05:00
Volker Lendecke
a6e88785e7 r15136: Fix join consistency check 2007-10-10 11:16:25 -05:00
Volker Lendecke
c981bc7f31 r15133: in_server is not used anywhere 2007-10-10 11:16:25 -05:00
Volker Lendecke
97d2c20b0b r15132: Fix some shadowed variable warnings 2007-10-10 11:16:25 -05:00
Jeremy Allison
93ca3eee55 r15129: Separate out mechanism and policy for NTLMSSP auth/sign/seal. 
With this change (and setting lanman auth = no in smb.conf)
we have *identical* NTLMSSP flags to W2K3 in SPNEGO auth.
Jeremy
 2007-10-10 11:16:25 -05:00
Günther Deschner
22b6875897 r15123: Don't even try to join with an inproper configuration. 
Guenther
 2007-10-10 11:16:25 -05:00
Volker Lendecke
6c65cccc83 r15119: Initialize our global sam sid first, quite a lot of the other initialization 
routines further down depend on it.

Fix bug 3696.

Volker
 2007-10-10 11:16:24 -05:00
James Peach
853ebd6e84 r15116: Allow the user to set winbind nss timeouts in seconds on IRIX. Don't 
convert the default timeout to milliseconds twice.
 2007-10-10 11:16:24 -05:00
Jeremy Allison
71d0191c31 r15115: Fix error return on sessionsetup. Ensure no 
data blob is added if the logon call failed.
Jeremy.
 2007-10-10 11:16:24 -05:00
Jeremy Allison
9db6617756 r15112: Move strict locking default to auto. Fix up the error 
return for one of the Samba4 torture tests.
Jeremy.
 2007-10-10 11:16:24 -05:00
Jeremy Allison
634e0dc3c7 r15107: 64 bit fixes. size_t on a 64-bit box is not uint32. 
Jeremy.
 2007-10-10 11:16:23 -05:00
Volker Lendecke
d52002c1c9 r15104: Implement Samba4's tdb_name(). 
Volker
 2007-10-10 11:16:23 -05:00
Volker Lendecke
0a2f1ed5e9 r15103: Okay, looking closer: Samba4 tdb not exporting u32 is a bug in samba4's 
tdb. tdb_open_ex needs it. Can someone from samba4 tell me how this should be
handled?

Thanks,

Volker
 2007-10-10 11:16:23 -05:00
Volker Lendecke
0a1665a1b7 r15102: u32 is a tdb-only thing that's not exported by samba4 tdb. Replace by uint32. 
Volker
 2007-10-10 11:16:23 -05:00
Volker Lendecke
b9c6e3f556 r15101: Little step towards getting Samba4 tdb into 3: tdb_lock_bystring does not 
have the timeout argument in Samba4. Add a new routine
tdb_lock_bystring_with_timeout.

Volker
 2007-10-10 11:16:23 -05:00
Volker Lendecke
d3d388180d r15098: Make smbclient -L use RPC to list shares, fall back to RAP. This should list 
long share names.

Volker
 2007-10-10 11:16:23 -05:00
Lars Müller
27044d23ff r15094: Replace ; by # where we have a comment and remove superfluous spaces at 
the end of lines.
 2007-10-10 11:16:22 -05:00
Lars Müller
74fa3a2554 r15093: Align to the last winbind changes. 2007-10-10 11:16:22 -05:00
Jeremy Allison
8272a5ab06 r15088: Remove all time() and gettimeofday() calls out of the mainline 
packet processing code. Only do these when needed (ie. in the
idle timeout code). We drop an unneccessary global here too.
Jeremy.
 2007-10-10 11:16:22 -05:00
Gerald Carter
77fb19c45d r15086: Get defensive about creating user accounts when winbindd 
fails (but is present).
 2007-10-10 11:16:22 -05:00
Jeremy Allison
23dcff4d50 r15084: Try and squeeze more out of the non-read/write code path. 
Jeremy.
 2007-10-10 11:16:22 -05:00
Jeremy Allison
1c99aed563 r15083: Using talloc with destructors is nice and all, but in this 
case it's in a performace critical path and it *hurts* us.
Go back to plain malloc/free with an explicit destructor
call.
Jeremy.
 2007-10-10 11:16:22 -05:00
Günther Deschner
e32c4f6f6e r15080: As discussed with Jerry, remove the CAP_LIBS again (we don't need that 
handling anymore when we remove $(LIBS) from pam_winbind again.

Also make sure to build our own copy of iniparser with -fPIC.

Guenther
 2007-10-10 11:16:21 -05:00
Gerald Carter
7d5adcf3a7 r15074: Remove -lcap from pam_winbind (not needed) 
Temporary linking fix for --with-included-iniparser
(gd will do a proper fix later).
 2007-10-10 11:16:21 -05:00