1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-04 17:47:26 +03:00

1604 Commits

Author SHA1 Message Date
Günther Deschner
4826f9d413 r11859: Another place where the SE_GROUP constants read better then "7".
Guenther
(This used to be commit 4c4b2096459ffa6ca0130f1259499933e3182d47)
2007-10-10 11:05:31 -05:00
Günther Deschner
2770e98aec r11856: Replace unknown1 with group_attr.
Can anyone remember why we initialize groups only with 0x03 instead of 0x07 ?

Guenther
(This used to be commit 3282c7c458d390547fbaca44821eff376e8f9aaa)
2007-10-10 11:05:30 -05:00
Jeremy Allison
9be0ce4422 r11793: Fix the SAMR cache so it works across completely insane
client behaviour (ie.:
open pipe/open SAMR handle/enumerate 0 - 1024
close SAMR handle, close pipe.
open pipe/open SAMR handle/enumerate 1024 - 2048...
close SAMR handle, close pipe.
And on ad-nausium. Amazing.... probably object-oriented
client side programming in action yet again.
This change should *massively* improve performance when
enumerating users from an LDAP database.
Jeremy.
(This used to be commit 8ce705d9cc1b6a79d710a10ff38f72a0f1006dda)
2007-10-10 11:05:28 -05:00
Jeremy Allison
d09beee040 r11769: Looking at a performance problem enumerating accounts, wondered
if changing to support samr_connect5 might help so quickly coded
it up. No it doesn't :-(. Don't merge this for 3.0.21 please.
Jeremy.
(This used to be commit bff1df678a8948d382f4555e83a1df23146a4b12)
2007-10-10 11:05:27 -05:00
Gerald Carter
1ce2883865 r11762: fix my build breakage
(This used to be commit 9ee851630ec3443f27a61de6eaf222c74d2d064a)
2007-10-10 11:05:26 -05:00
Gerald Carter
5251618c7f r11761: * fix clearing of event logs by truncating the tdb.
This feature got broken in some of the other updates.
  Now each open handle stores an pointer to an open tdb
  data structure (not the tdb pointer itself).
  Clearing can be done with a simple elog_close_tdb( elog, True )
  to force a close and then calling elog_open_tdb( logname, True )
  to force an tdb truncate.  Permissions on existing tdbs are
  maintained which is important.

* We don't currently handle backup.  Haven't looked at the
  format of a backuped up eventlog to know what the deal is.
(This used to be commit 2df34c9403446d12f1ceeac38cbda5d3ba805b02)
2007-10-10 11:05:26 -05:00
Gerald Carter
70cac98b6e r11760: fix sequential reads in the eventlog; event viewer is behaving better now as well but needs more testing
(This used to be commit ba2f94aeae1f8e69d53fc360785adf222a8c9c6e)
2007-10-10 11:05:26 -05:00
Gerald Carter
c672a17ff0 r11617: fix typo
(This used to be commit 37d2bf02f37f6d1b5bac9523f085c00625722761)
2007-10-10 11:05:22 -05:00
Jeremy Allison
fcceedd67c r11573: Adding Andrew Bartlett's patch to make machine account
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes
the auth module interface to 2 (from 1). The effect of this is
that clients can access resources as a machine account if they
set these flags. This is the same as Windows (think of a VPN
where the vpn client authenticates itself to a VPN server
using machine account credentials - the vpn server checks
that the machine password was valid by performing a machine
account check with the PDC in the same was as it would a
user account check. I may add in a restriction (parameter)
to allow this behaviour to be turned off (as it was previously).
That may be on by default.
Andrew Bartlett please review this change carefully.
Jeremy.
(This used to be commit d1caef866326346fb191f8129d13d98379f18cd8)
2007-10-10 11:05:20 -05:00
Jeremy Allison
6d5757395a r11511: A classic "friday night check-in" :-). This moves much
of the Samba4 timezone handling code back into Samba3.
Gets rid of "kludge-gmt" and removes the effectiveness
of the parameter "time offset" (I can add this back
in very easily if needed) - it's no longer being
looked at. I'm hoping this will fix the problems people
have been having with DST transitions. I'll start comprehensive
testing tomorrow, but for now all modifications are done.
Splits time get/set functions into srv_XXX and cli_XXX
as they need to look at different timezone offsets.
Get rid of much of the "efficiency" cruft that was
added to Samba back in the day when the C library
timezone handling functions were slow.
Jeremy.
(This used to be commit 414303bc0272f207046b471a0364fa296b67c1f8)
2007-10-10 11:05:19 -05:00
Jeremy Allison
c9effb004c r11451: Fix -O1 "might be using uninitialized" errors.
Jeremy.
(This used to be commit cab76c3c33883aad444eefb6562ab1b27d9ca88a)
2007-10-10 11:05:16 -05:00
Jeremy Allison
a656626d0f r11433: Fix for bug #3223 - ensure we're root before doing
any potential lib/smbldap.c calls.
Jeremy.
(This used to be commit 915cfb48f08b3748e22e68ed028eaca6d558cbad)
2007-10-10 11:05:16 -05:00
Gerald Carter
e1ffd2d612 r11332: eventlog API uses NTSTATUS, not WERROR for return codes
(This used to be commit f5f40633bc3f641a0fef4934375d0d829899b0d7)
2007-10-10 11:05:13 -05:00
Gerald Carter
90b1ca2597 r11292: Missed merge from Samba 2.2 many years ago....
Don't count open pipes in the num_files_open on a connection.
conn_idle_all() handles this by looking for open rpc handles
If there are no open handles, we can close the IPC$ share.
(This used to be commit 747fba4dbf06c42495c430cd78c1cded3445f821)
2007-10-10 11:05:10 -05:00
Gerald Carter
cd310c19ce r11240: * fix invalid read reported by valgrind in the
spoolss backchannel connection by rewriting
  spoolss_connect_to_client().  Ensure that we
  save the cli_state* in the rpc_pipe_client struct.

* fix typo in debug message in cli_start_connection"
(This used to be commit 18400f96628ffdd332c2fb2aa52b5e9aee5cb3ce)
2007-10-10 11:05:09 -05:00
Jim McDonough
1113cad9c0 r11236: Implement user rename for smbpasswd and ldap backends. Some cleanup on
tdb as well to make naming consistent.
(This used to be commit ee91eb9a39cc5e3edd9e97eb040e7557930e4e62)
2007-10-10 11:05:08 -05:00
Gerald Carter
6fc9098dcc r11235: fix segfault in addprinter due to mixing talloc() and malloc()'d memory
(This used to be commit f6f78877b485be5efd5cf1f3147b2e9fee647e52)
2007-10-10 11:05:08 -05:00
Gerald Carter
39be2680e0 r11170: root free pass on eventlog open access check
(This used to be commit 4e3ff41e1ee2e3c323814fd8c6aa44ecab412257)
2007-10-10 11:05:05 -05:00
Jeremy Allison
8d7c886671 r11137: Compile with only 2 warnings (I'm still working on that code) on a gcc4
x86_64 box.
Jeremy.
(This used to be commit d720867a788c735e56d53d63265255830ec21208)
2007-10-10 11:05:02 -05:00
Gerald Carter
6f72169c7c r11135: should fix seg fault in addprinter code reported by Marcin. Allocate memory in convert_printer_info() if necessary
(This used to be commit 7ada5da8e94a08a9a3e488172fa04ce688882299)
2007-10-10 11:05:02 -05:00
Gerald Carter
5b52e4a0eb r11072: add routines for converting REG_MULTI_SZ to and from char**
(This used to be commit e858eed813b5a9a8d57262142c5bbde2951b5590)
2007-10-10 11:05:00 -05:00
Gerald Carter
1b91229435 r11069: make sure to zero memory when allocating a a REGVAL_CTR struct
(This used to be commit bfdcbb7572352b3a3b7941249438a927eb91e18d)
2007-10-10 11:05:00 -05:00
Gerald Carter
bb68761a50 r11060: merging new eventlog code from trunk
(This used to be commit 1bcf7e82ede63a851a244162a3b939373787b693)
2007-10-10 11:04:59 -05:00
Gerald Carter
b9ae4455fd r11054: patch from Brian Moran; fix error code return in _srv_net_name_validate()
(This used to be commit b4e78520ccb8c896a52e3f3e7a52e19e3b2c33bf)
2007-10-10 11:04:59 -05:00
Jim McDonough
254938c636 r10911: part of #2861: add rename support for usrmgr.exe when using tdbsam
This gets it working before replacing tdb with the samba4 version.
(This used to be commit 8210b0503a050e12ee1b4335fa6e50d10ad06577)
2007-10-10 11:04:56 -05:00
Gerald Carter
01a1e5cdb0 r10819: merging a couple of fixes from trunk
* only keep the registry,tdb file open when we have an open key handle
* tpot's setup.py fix
* removing files that no longer exist in trunk and copying some
  that were missing in 3.0
(This used to be commit 6c6bf6ca5fd430a7a20bf20ed08050328660e570)
2007-10-10 11:04:54 -05:00
Jeremy Allison
c226b7d4be r10795: Fix code before decl error.
Jeremy.
(This used to be commit 30bd894ee63e5be266b6069533138ccb3c0fbccb)
2007-10-10 11:04:54 -05:00
Jeremy Allison
e127501d45 r10792: Fix the "schannel not stored across client disconnects" problem.
Based on the Samba4 solution - stores data in
$samba/private/schannel_store.tdb.
This tdb is not left open but open and closed on demand.
Jeremy.
(This used to be commit a6d8a4b1ff31c5552075455dbd98cb58795958a9)
2007-10-10 11:04:54 -05:00
Gerald Carter
0bf72b6e33 r10781: merging eventlog and svcctl code from trunk
(This used to be commit f10aa9fb84bfac4f1a22b74d63999668700ffaac)
2007-10-10 11:04:53 -05:00
Jeremy Allison
2237bc6a42 r10724: Got a little ahead of myself...
Jeremy.
(This used to be commit 86ffef8162393be3da81fda13772f0f1d40b0d08)
2007-10-10 11:04:51 -05:00
Jeremy Allison
ac34076306 r10722: Remove unused BOOL in struct dcinfo.
Ensure that the mach_acct and remote machine entries are
set correctly in struct dcinfo - we'll need this as a key
for a persistent schannel state later.
Jeremy.
(This used to be commit 47269b5c7161d740c2e86227de3acd9e08c53817)
2007-10-10 11:04:51 -05:00
Gerald Carter
54abd2aa66 r10656: BIG merge from trunk. Features not copied over
* \PIPE\unixinfo
* winbindd's {group,alias}membership new functions
* winbindd's lookupsids() functionality
* swat (trunk changes to be reverted as per discussion with Deryck)
(This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3)
2007-10-10 11:04:48 -05:00
Gerald Carter
1896d77fe5 r10585: variation of fix in trunk for root-free-pass in registry access checks
(This used to be commit b41f997a2a67f7dc60b300866b38f72846c600fb)
2007-10-10 11:04:47 -05:00
Jeremy Allison
c2e5ce1501 r10269: Server-side fix for creds change - revert jcmd's change.
Jeremy.
(This used to be commit e1c9813d63a441037bc71622a29acda099d72f71)
2007-10-10 11:03:40 -05:00
Gerald Carter
fbcaef3bf6 r10264: reverse order of 'root free pass' checks in service and registry access_checks()
(This used to be commit 35b338a4fc95c14629579336dcf3bd240fda92d3)
2007-10-10 11:03:39 -05:00
Gerald Carter
a9b96c6b3d r10221: add "free pass for root" in svcctl and default winreg access checks
(This used to be commit 24901187962e24bfa5ba7722aba0aeb9397ac7b6)
2007-10-10 11:03:38 -05:00
Gerald Carter
d4f2df5d5c r9956: Ensure accounts with the SeAddUsersPrivilege can modify domain and local group attributes (posted to samba ml and confirmed fix)
(This used to be commit 005d4cb3c636383ccf70c4891cd7cc4bd3b48ad2)
2007-10-10 11:03:29 -05:00
Günther Deschner
513e81458f r9945: fix typos.
Guenther
(This used to be commit 12029e902277053a4066eae1b3ae311fae5e6422)
2007-10-10 11:03:28 -05:00
Gerald Carter
a206a5efdd r9788: more compiler warnings from Jason Mader
(This used to be commit 9c51aa5bd2862d73663c4148eff3080341010405)
2007-10-10 11:03:26 -05:00
James Peach
8c072021ef r9780: Clean up a bunch of compiler warnings.
(This used to be commit 623d2e69319ffead31a780a4d6156dae45f386d7)
2007-10-10 11:03:26 -05:00
Gerald Carter
c53e760ea5 r9752: figured out why talloc_steal() is a bad idea for SEC_DESC*
Add a comment so someone else doesn't get bitten by this as well.
(This used to be commit 050364ef34b1e69260bd9df9e2140c45263e92f5)
2007-10-10 11:03:25 -05:00
Gerald Carter
44707ad2e0 r9739: conver the reg_objects (REGSUBKEY_CTR & REGVAL_CTR) to use
the new talloc() features:

 Note that the REGSUB_CTR and REGVAL_CTR objects *must* be talloc()'d
 since the methods use the object pointer as the talloc context for
 internal private data.

 There is no longer a regXXX_ctr_intit() and regXXX_ctr_destroy()
 pair of functions.  Simply TALLOC_ZERO_P() and TALLOC_FREE() the
 object.

Also had to convert the printer_info_2->NT_PRINTER_DATA field
to be talloc()'d as well.  This is just a stop on the road to
cleaning up the printer memory management.
(This used to be commit ef721333ab9639cb5346067497e99fbd0d4425dd)
2007-10-10 11:03:25 -05:00
Gerald Carter
be0f3f159f r9660: real fix for group enumeration bug in 3.0.20; only affected the ldapsam code
(This used to be commit 62f9fb5e3a9bce539c9fedc5fdec1b8741a922c7)
2007-10-10 11:03:24 -05:00
Gerald Carter
e76107dd9b r9594: return the mapped name in enum_dom_groups()
(This used to be commit a769aaec88257ae006c61f0fcfd98efd4b639268)
2007-10-10 11:03:22 -05:00
Tim Potter
021892a6ce r9276: Fix another unused variable warning. Bugzilla #2981.
(This used to be commit abe2ab72e6b1d53dbe04d02882e4fee9cb34dec7)
2007-10-10 11:00:30 -05:00
Tim Potter
36115e7ebc r9275: Remove some dead code. Bugzilla #2982.
(This used to be commit e1fc7d89c26b671e77c7cb14e03690091b671b1d)
2007-10-10 11:00:30 -05:00
Gerald Carter
d04c1efd0f r9264: fix valgrind invalid write error in enumprinterdata()
(This used to be commit bfebbc86fc0f90e580888da25006d8e5e50b6304)
2007-10-10 11:00:29 -05:00
Jim McDonough
dcf2200411 r9261: Fix #2976: windows member servers wouldn't alloc connections from users
defined locally because if we didn't find them as a DC we were marking
the response as authoritative.  Now if it's not a domain we know, we
mark the response non-authoritative.

Fix from jpjanosi@us.ibm.com
(This used to be commit d522277b86ff728f6f2b9feb2f8e3fa38c43d162)
2007-10-10 11:00:29 -05:00
Jim McDonough
d6403e7280 r9242: Fix my fix for #2953. I'd moved too much code until after we verify the user,
causing netlogon to return an invalid response for failed interactive logons.
(This used to be commit 4deb918b682fb51d8712cfdafc6210275dd10fc4)
2007-10-10 11:00:28 -05:00
Günther Deschner
3662fb6d3a r9229: merge from trunk:
allow admins to uncheck the "User must change Password at next Logon"
checkbox in Usermanager.

Guenther
(This used to be commit b1e4b72c1c36869c4dfc5ed284be24edc99f6774)
2007-10-10 11:00:28 -05:00