1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-05 12:23:50 +03:00
Commit Graph

16037 Commits

Author SHA1 Message Date
Lars Müller
49e6431c06 r13598: Defining KRB5KRB_ERR_RESPONSE_TOO_BIG if not defined which is the case
for older krb5 implementations.

Patch slightly modified from the version provided by Björn Jacke <bjoern
at j3e dot de> at the samba-technical list after discussion on the list
and by IRC.  Thanks Björn!
2007-10-10 11:10:18 -05:00
Lars Müller
bab8c156a4 r13597: krb5 error codes are defined as long. 2007-10-10 11:10:18 -05:00
Jeremy Allison
cd82107989 r13594: Got sense of NTSTATUS check reversed.
Jeremy.
2007-10-10 11:10:18 -05:00
Gerald Carter
6568c9cb03 r13593: consolidate pdb_set_sam_sids() into samu_set_unix() which
was the only place it was called from.
2007-10-10 11:10:18 -05:00
Gerald Carter
cf9140ad26 r13591: I really have no idea how this code ever worked. And I have
no idea why no one (including myself) caught this with a compiler
warning....Make sure new_chunk() actually returns a pointer
to the allocated memory.

SAMBA_3_0 now works again on Solaris.
2007-10-10 11:10:16 -05:00
Gerald Carter
6f1afa4acc r13590: * replace all pdb_init_sam[_talloc]() calls with samu_new()
* replace all pdb_{init,fill}_sam_pw() calls with samu_set_unix()
2007-10-10 11:10:16 -05:00
Gerald Carter
77332f0738 r13589: Make sure we only try to close the tdbsam file in endsampwent() when we
have a valid pwent list from a setsampwent().  Fixes a bug with the
reference count on the open tdb.
2007-10-10 11:10:16 -05:00
Jeremy Allison
7a17b39c80 r13588: Second attempt to fix Bug #3330 - treat the string as a
uint8 array and copy as such. Gunther please check (sorry
I reverted your earlier fix).
Jeremy.
2007-10-10 11:10:16 -05:00
Jeremy Allison
33e13aabd3 r13585: Sorry Gunther, had to revert this. It's got a buffer
overrun. Spoke to Jerry about the correct fix. Will add
this after.
Jeremy.
2007-10-10 11:10:16 -05:00
Günther Deschner
9732490811 r13581: Correctly parse a non-null terminated, little-endian UCS2 string in the
PAC_LOGON_NAME structure. This was broken on big-endian machines
(Solaris SPARC and ppc). Fixes Bug #3330.

Jerry, this should be in 3.0.21c.

Guenther
2007-10-10 11:10:16 -05:00
Volker Lendecke
4cf5109c7a r13579: Next try to fix the AIX build. Thanks to Björn for nagging...
Volker
2007-10-10 11:10:15 -05:00
Gerald Carter
19b7593972 r13576: This is the beginnings of moving the SAM_ACCOUNT data structure
to make full use of the new talloc() interface.  Discussed with Volker
and Jeremy.

* remove the internal mem_ctx and simply use the talloc()
  structure as the context.
* replace the internal free_fn() with a talloc_destructor() function
* remove the unnecessary private nested structure
* rename SAM_ACCOUNT to 'struct samu' to indicate the current an
  upcoming changes.  Groups will most likely be replaced with a
  'struct samg' in the future.

Note that there are now passbd API changes.  And for the most
part, the wrapper functions remain the same.

While this code has been tested on tdb and ldap based Samba PDC's
as well as Samba member servers, there are probably still
some bugs.  The code also needs more testing under valgrind to
ensure it's not leaking memory.

But it's a start......
2007-10-10 11:10:15 -05:00
Gerald Carter
af57e4a4cc r13574: fix build; talloctort.c should not use the TALLOC_FREE() macro 2007-10-10 11:10:15 -05:00
Gerald Carter
028b1f26ae r13573: removing wrepld from SAMBA_3_0. The Samba 4 work is more current and any integration into Samba 3 would most likely be from scratch 2007-10-10 11:10:15 -05:00
Gerald Carter
b65be8874a r13571: Replace all calls to talloc_free() with thye TALLOC_FREE()
macro which sets the freed pointer to NULL.
2007-10-10 11:10:14 -05:00
Günther Deschner
69fb189a6b r13566: Fix EA support for AIX.
Patch from Bjoern Jacke <bjacke-at-sernet-dot-de>.

Guenther
2007-10-10 11:10:14 -05:00
James Peach
5e7efe304b r13564: Remove trailing backslash. Makes other than GNU make choke on this. 2007-10-10 11:10:14 -05:00
Jeremy Allison
bcb87271d6 r13563: Fix bug #3526 found and diagnosed by corinna@vinschen.de.
trans2findfirst recognises two info levels *not* recognised
by trans2findnext. Add them. Needed for 3.0.21c.
Jeremy.
2007-10-10 11:10:14 -05:00
Jeremy Allison
c8185e7f94 r13559: Fix bug #3522 reported by Sandeep Tamhankar <sandman@electric-cloud.com>.
mkdir foo returns the wrong error message when file foo exists.
Jeremy.
2007-10-10 11:10:14 -05:00
Jeremy Allison
4877f336b2 r13557: (Hopefully) get the creds store/restore key right from
the correct part of the netlogon and schannel packets.
Jeremy.
2007-10-10 11:10:13 -05:00
Jeremy Allison
fd84d9703e r13556: Ensure that any potential creds operation are protected
by schannel if "server schannel = true" was set.
Jeremy.
2007-10-10 11:10:13 -05:00
Jeremy Allison
ea82958349 r13553: Fix all our warnings at -O6 on an x86_64 box.
Jeremy.
2007-10-10 11:10:13 -05:00
Jeremy Allison
09f0b3e1a3 r13552: Make sure we're using the same name to load the stored
creds under all circumstances. This may be wrong, but
at least we're now consistent.
Jeremy.
2007-10-10 11:10:13 -05:00
Gerald Carter
db575c7641 r13550: remove pdb_guest 2007-10-10 11:10:13 -05:00
Jeremy Allison
43f095a38d r13548: Always use the get_remote_macinhe_name() as the key
for the creds store. This should fix the problems
Jerry reported (but I have still to run tests :-).
Jeremy.
2007-10-10 11:10:13 -05:00
Gerald Carter
117d9fd9e1 r13547: add earlier checks to deny deleting a printer driver. The previous
code relied upon file permissions alone.  Now we check that
the user is a printer administrator and that the share has not been
marked read only for that user.
2007-10-10 11:10:12 -05:00
Gerald Carter
380d89d148 r13546: NSS soname merge from trunk 2007-10-10 11:10:12 -05:00
Gerald Carter
f79f4dc4c5 r13545: A patch which I think it's time has come. VOlker, we can talk about
this more but it gets around the primary group issue.

* don't map a SID to a name from the group mapping code if
  the map doesn't have a valid gid.  This is only an issue
  in a tdb setup
* Always allow S-1-$DOMAIN-513 to resolve (just like Windows)
* if we cannot resolve a users primary GID to a SID, then set
  it to S-1-$DOMAIN-513
* Ignore the primary group SID inside pdb_enum_group_memberships().
  Only look at the Unix group membersip.

Jeremy, this fixes a fresh install startup for smbd as far as my tests
are concerned.
2007-10-10 11:10:12 -05:00
Volker Lendecke
a95d7d7222 r13544: -O1 janitor work :-) 2007-10-10 11:10:12 -05:00
Jeremy Allison
e755155b0e r13542: Don't reuse a pointer we just freed (Doh!).
Jeremy.
2007-10-10 11:10:11 -05:00
Gerald Carter
06b83fe350 r13541: we have to wrap pen_enum_group_memberships() in become/unbecome_root()
blocks.  This fixes the problem I had with missing groups in the
net_samlogon() reply from a Samba PDC.
2007-10-10 11:10:11 -05:00
Jeremy Allison
a2fb436fc5 r13539: Add 128 bit creds processing client and server. Thanks to Andrew Bartlett's
Samba4 code.
Jeremy.
2007-10-10 11:10:11 -05:00
Jeremy Allison
cef240d571 r13538: Make sure we store all 16 bytes of credentials session
key and delete records that are old. We will need this
for the full 16 byte session key support.
Jeremy.
2007-10-10 11:10:11 -05:00
Jeremy Allison
fe63a6ee06 r13535: Fix #2353 based on a patch by William Jojo.
Jeremy.
2007-10-10 11:10:11 -05:00
Jeremy Allison
1fcac478cb r13530: Fix from William Jojo for #1970. Make nmblookup do
a node status on all IP's when requested.
Jeremy.
2007-10-10 11:10:10 -05:00
Lars Müller
7716c69729 r13529: No functional, line break changes to let it fit into 80 chares screen
width again.
2007-10-10 11:10:10 -05:00
Lars Müller
5db7e9a42a r13528: Mention the tools and commandline option names used. 2007-10-10 11:10:10 -05:00
Lars Müller
e00505cc94 r13527: Adjust copyright header with information got from the 2.2 cvs tree. 2007-10-10 11:10:10 -05:00
Lars Müller
66990adfac r13526: Remove superfuous extra spaces at EOL. 2007-10-10 11:10:10 -05:00
Lars Müller
4272419b11 r13525: This is only a cleanup to have the memset() and SAFE_FREE() only one
time in the code.

Even if we now have an additional if statement after the free I prefer
this solution in opposite to the duplicated code we had before.
2007-10-10 11:10:10 -05:00
Lars Müller
dbdc5ba497 r13524: Add -t|--password-from-stdin option to pdbedit as we had with Samba 2.2.
This fixes bug #1386.

The initial changes had been made by Carsten Höger <choeger at
open-xhange dot com> for Samba 2.2 while being at SuSE. *sigh*

To not duplicate code from smbpasswd in pdbedit stdin_new_passwd() and
get_pass() are moved from smbpasswd to utils/passwd_util.c.
2007-10-10 11:10:10 -05:00
Günther Deschner
85435bf961 r13523: Fix indent.
Guenther
2007-10-10 11:10:09 -05:00
Günther Deschner
290a581b75 r13522: Add SAMR_GET_USRDOM_PWINFO client-side.
Guenther
2007-10-10 11:10:09 -05:00
Jeremy Allison
6ec0e9124a r13521: Implement LOOKUPNAME3 and 4.
Jeremy.
2007-10-10 11:10:09 -05:00
Jeremy Allison
80f4868944 r13519: Fix the credentials chaining across netlogon pipe disconnects.
I mean it this time :-).
Jeremy.
2007-10-10 11:10:09 -05:00
Volker Lendecke
d0efb435e5 r13517: Fix typo -- thanks to Karolin Seeger <ks@sernet.de> 2007-10-10 11:10:09 -05:00
Gerald Carter
a918e4ac24 r13515: Make sure to store the correct domain name in the server affinity cache. 2007-10-10 11:10:09 -05:00
Gerald Carter
5385a01ee1 r13513: Changing defaults:
* enable privileges = yes
  * enable asu support = no

Remove unused function after the tdbsam rewrite.
2007-10-10 11:10:08 -05:00
Gerald Carter
94c37e0652 r13512: Rewrite tdbsam code to use a reference count based open/close
on the tdb file.  This allow recusive calls to succeed
without complaining about failed opens since a tdb can
only be opened once per process.  We probably still need to backport
the transaction support from Samba 4 here though.
2007-10-10 11:10:08 -05:00
Gerald Carter
7967f89caa r13511: Fix bug in the samr dispinfo enumeration code.
Make sure to associate the DOMAIN dispinfo cache
with a User/Group SAMR handle (not the SID of the user or group).
Ensure that enumeration after deleting a user works.
2007-10-10 11:10:08 -05:00