1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-21 03:17:08 +03:00

382 Commits

Author SHA1 Message Date
Stefan Metzmacher
ae0801c800 r12435: the max wins ttl is 6 days in windows and samba3
metze
(This used to be commit 0ed07057d37ec6684a01ba699073b4ba6d671697)
2007-10-10 13:47:39 -05:00
Stefan Metzmacher
736543016e r12304: split out the wins partner configuration into a seperate ldb.
now $privatedir/wins_config.ldb contains the wins partners
and $lockdir/wins.ldb contains the name records

metze
(This used to be commit baa4a7a9d4f16adf476846850a63dfbfd51b10b3)
2007-10-10 13:47:28 -05:00
Andrew Bartlett
16bbafb7e8 r11239: Use ${REALM} for the realm in rootdse.ldif
Add the kpasswd server to our KDC, implementing the 'original' and
Microsoft versions of the protocol.

This works with the Heimdal kpasswd client, but not with MIT, I think
due to ordering issues.  It may not be worth the pain to have this
code go via GENSEC, as it is very, very tied to krb5.

This gets us one step closer to joins from Apple, Samba3 and other
similar implementations.

Andrew Bartlett
(This used to be commit ab5dbbe10a162286aa6694c7e08de43b48e34cdb)
2007-10-10 13:45:06 -05:00
Volker Lendecke
0f51ae83f0 r11181: Implement wbinfo -s and wbinfo --user-sids. The patch is so large because
--user-sids required the extension to trusted domains.

Implement "winbind sealed pipes" parameter for debugging purposes.

Volker
(This used to be commit 3821a17bdb68b2f1389b5a150502c057d28569d2)
2007-10-10 13:44:57 -05:00
Stefan Metzmacher
305b2b0c49 r11089: start the winsreplication task when we run with wins support = yes
metze
(This used to be commit d49a1d2b15c7d17a5d6928a971fbe87d13686c2d)
2007-10-10 13:44:46 -05:00
Jelmer Vernooij
4abb479761 r10588: Remove more unused files, macros
(This used to be commit d2f80c0457f7404b2cac9df59a400130e9ad025f)
2007-10-10 13:39:08 -05:00
Jelmer Vernooij
49839f356f r10513: Reduce some use of pstring. The main reason some parts of the code still
use pstring is next_token() now.
(This used to be commit a5b88bcd420eb7ae42283293541519e142be36e3)
2007-10-10 13:38:58 -05:00
Jelmer Vernooij
8db177b652 r10366: More scons fixes. Building et, asn1, lex and yacc files sort-of works now
(This used to be commit 22f18a84242e5e68a2d57b6d7ff77c089ee7434a)
2007-10-10 13:38:32 -05:00
Jelmer Vernooij
d2a666acbe r10316: More dynconfig fixes
(This used to be commit 0963ab9c148772b961f17ec779213b0eb861e1dd)
2007-10-10 13:38:17 -05:00
Andrew Bartlett
a388d683de r10314: Apply the controvertial 'server role =' patch after discussion on the list:
This patch removes the 'domain logon' and 'domain master' controls from
Samba4, in favour of a 'server role =' that users can actually
understand.

We can expand the list of roles as needed, and nobody has to figure out
what a 'domain master' actually means.

Andrew Bartlett
(This used to be commit 31e755c2ced64dbd2681d5f6ef021a87dbeda689)
2007-10-10 13:38:16 -05:00
Andrew Bartlett
f281d77824 r10291: The patch optionally (off by default, not available in all cases) allows
Samba to use the target principal name supplied in the mechTokenMIC of
an SPNEGO negTokenInit.

This isn't a great idea for security reasons, but is how Samba3 behaves,
and allows kerberos to function more often in some environments.  It is
only available for CIFS session setups, due to the ordering of the
exchange.

Andrew Bartlett
(This used to be commit f6a645644127ae695a9f7288e0a469f2eb7f3066)
2007-10-10 13:38:13 -05:00
Jelmer Vernooij
7e3838dd2d r9685: Add tests for samba3sam mapping module
Fix a couple of bugs
Move samba3sam backend to lib/ldb/
Remove some more unused parameters
(This used to be commit 7f864d446d6af7cfd9fb8dbc496a29b36ec57ce9)
2007-10-10 13:34:41 -05:00
Jelmer Vernooij
e3dcc92dee r9684: Remove unused parameters (about 70)
(This used to be commit 4a51a31571d12078e3c2c78641c0c844fc26925d)
2007-10-10 13:34:40 -05:00
Jelmer Vernooij
dcd27d550f r9602: Add support for reading share_info.tdb and smb.conf.
Add userdata argument to function pointers for pm_process()
(This used to be commit 84b2fb34675fa557173621433838c5a7ec0f1283)
2007-10-10 13:34:33 -05:00
Tim Potter
92789c05ef r9382: Add a dummy registry for HKEY_USERS to get rid of the annoying dialog
presented by regedt32.  I think this hive is dynamically generated
from SAM information.
(This used to be commit feb341969e59540bc22e78df0d44b4d42c336d31)
2007-10-10 13:33:30 -05:00
Andrew Tridgell
beed5b8532 r9119: added a lp.categories() call in the loadparm js object, to allow
retrieval of the smb.conf parameter categories. This will make writing
a smb.conf editor easier.
(This used to be commit 8db549b1506b5260c9eb16f40bbdae6a7c006fa2)
2007-10-10 13:31:18 -05:00
Andrew Tridgell
2f5f01567b r8643: - make lp_configfile() work again
- get rid of redundeny dyn_CONFIGFILE argument to lp_load()

- fixed provisioning to work with completely pristine install,
  creating an initial smb.conf is none is present

- added lp.set() and lp.reload() to loadparm ejs object interface
(This used to be commit c2691ef7126ddcee5f95970b78759b40a049d0a7)
2007-10-10 13:29:48 -05:00
Love Hörnquist Åstrand
61edb97bdf r8394: Make sure the argument to ctype is*(3) macros are unsigned char as
required by ISO C99.
(This used to be commit 56fd21c806e816cf4c3d23881f26474f858b45e2)
2007-10-10 13:20:14 -05:00
Andrew Tridgell
b3320581ff r8344: added a "setup directory" smb.conf parameter, pointing at the setup template files
(This used to be commit c842144cbf642b10df21c979d3c4b9fe94384b96)
2007-10-10 13:20:09 -05:00
Andrew Tridgell
b2f1321821 r8297: add libinclude() function in ejs, which is like include() but searches a js library
path set in "js include" in smb.conf.

This will allow us to start building up a library of common js code,
while avoiding the problem of hard-coding include paths in scripts
(This used to be commit ff60529ba2515df29a20b4a417327a3565ec8ee9)
2007-10-10 13:19:32 -05:00
Andrew Bartlett
edb86cf196 r7966: We need a better way to do this, but enable the KDC by default, if we
have kerberos.

Andrew Bartlett
(This used to be commit 3d82b1417b9f2e31089cb8ee7e4f98bd226f2e75)
2007-10-10 13:18:54 -05:00
Andrew Tridgell
2a90c448bd r7916: - got rid of the in_client global
- make not finding smb.conf a level 1 message, not level 0. Most of our
  tools handle no smb.conf, and those that don't should check for the
  specific parameters they need, or use the defaults
(This used to be commit 8c17b61f8e0f6eefa6a1f853abc06d023627bbbb)
2007-10-10 13:18:49 -05:00
Andrew Tridgell
8c53aba485 r7912: make private_path() recognise a non-relative filename, so we can have
sam database = sam.ldb

and it will know to put it in the private dir, but if you use

  sam database = ldap://server

it knows to use it as-is
(This used to be commit c5bccbc366db144d3e1cb7b21f0e3284d841dd06)
2007-10-10 13:18:48 -05:00
Andrew Tridgell
9cc64156c4 r7793: allow integers in smb.conf to be specified in octal or hex
(This used to be commit ce6257b316bc66a3fc554487099976a853d25ddd)
2007-10-10 13:18:36 -05:00
Andrew Bartlett
e578c33c2c r7757: Add NTLMv2 support to the NT1 Session setup (ie, not SPNEGO/NTLMSSP)
Session Setup code.

Add a mem_ctx argument to a few of the NTLMv2 support functions, and
add smb.conf options to control client NTLMv2 behaviour.

Andrew Bartlett
(This used to be commit 3f35cdb218a3dae08a05e77452ca9f73716ceb28)
2007-10-10 13:18:32 -05:00
Andrew Tridgell
822498b7f5 r7744: converted the web server to use the lib/tls/ generic tls code
(This used to be commit 023fc567badba38b87895ea73515b2ce0b703a8c)
2007-10-10 13:18:30 -05:00
Stefan Metzmacher
8f85427d6d r7643: This patch adds a new NTPTR subsystem:
- this is an abstraction layer for print services,
  like out NTVFS subsystem for file services

- all protocol specific details are still in rpc_server/spoolss/
  - like the stupid in and out Buffer handling
  - checking of the r->in.server_name
  - ...

- this subsystem can have multiple implementation
  selected by the "ntptr providor" global-section parameter

- I currently added a "simple_ldb" backend,
  that stores Printers, Forms, Ports, Monitors, ...
  in the spoolss.db, and does no real printing
  this backend is basicly for testing, how the spoolss protocol
  works

- the interface is just a prototype and will be changed a bit
  the next days or weeks, till the simple_ldb backend can
  handle all calls that are used by normal w2k3/xp clients

- I'll also make the api async, as the ntvfs api
  this will make things like the RemoteFindFirstPrinterChangeNotifyEx(),
  that opens a connection back to the client, easier to implement,
  as we should not block the whole smbd for that

- the idea is to later implement a "unix" backend
  that works like the current samba3 code

- and maybe some embedded print server vendors can write there own
  backend that can directly talk to a printer without having cups or something like this

- the default settings are (it currently makes no sense to change them :-):

ntptr providor = simple_ldb
spoolss database = $private_dir/spoolss.db

metze
(This used to be commit 455b5536d41bc31ebef8290812f45d4a38afa8e9)
2007-10-10 13:18:16 -05:00
Andrew Bartlett
e76397739d r7531: Finally fix lp_load(). I had left hooks in place which restricted us
to globals only (no shares).

Andrew Bartlett
(This used to be commit 9e6112eee37927cd4deaa078ea09813e07c7c386)
2007-10-10 13:18:07 -05:00
Andrew Bartlett
00e2b7c1b4 r7530: Simply calling convention of lp_load().
This always loads all the services, as we now don't have an easy way
to split out smbd.

Andrew Bartlett
(This used to be commit 990e061939c76b559c4f5914c5fc6ca1b13e19dd)
2007-10-10 13:18:07 -05:00
Andrew Bartlett
51fc684227 r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be
included Heimdal) to Samba4.

Andrew Bartlett
(This used to be commit 51ba3ea60c265b837821b6c3e031dfe229c10d6a)
2007-10-10 13:17:27 -05:00
Andrew Tridgell
f466b72222 r7016: - added smb.conf parm 'web tls = true/false'
- by default enable tls if the certfile is set in smb.conf and gnutls library
  was compiled in
(This used to be commit bbafdeae3a68c0ff1170b0a4ecc568664ec1a925)
2007-10-10 13:17:06 -05:00
Andrew Tridgell
631f9782a6 r7012: added smb.conf parameters
web tls keyfile
  web tls certfile
  web tls cafile
  web tls crlfile
(This used to be commit abfa3e9179557cf1853f490a479a0003ce4e11f7)
2007-10-10 13:17:06 -05:00
Andrew Tridgell
ab78cc9dca r7008: - split out the loadparm type definitions so loadparm internals can be accessed externally
- moved esp_lpGet() to web_server/calls.c

- attempt to fixup ejs build with includes.h again
(This used to be commit 592a81c347981420154ddf3b8d4252d3bb08bc86)
2007-10-10 13:17:05 -05:00
Andrew Tridgell
1511cde44c r7002: added support for getting at loadparm config parameters via lpGet() in esp scripts
lpGet takes 4 forms
    v = lpGet("type:parm");             gets a parametric variable
    v = lpGet("share", "type:parm");    gets a parametric variable on a share
    v = lpGet("parm");                  gets a global variable
    v = lpGet("share", "parm");         gets a share variable

in all cases a ejs object of the appropriate type for the variable is returned.

This commit also adds the function typeof() which returns the type of an object
(This used to be commit 5537a0d38d4805cbc2dad0d6f76db15173b1fd60)
2007-10-10 13:17:04 -05:00
Andrew Tridgell
7e58231952 r6982: install the swat pages with 'make installswat'
(This used to be commit 31543e1eae03d22343ea8c970494af36eb07b41f)
2007-10-10 13:17:02 -05:00
Andrew Tridgell
d70912a26a r6981: first version of the builtin web server for Samba4
This includes an embedded server side scripting system called 'esp'
(see http://www.appwebserver.org/products/esp/esp.html) and javascript
based scripting language called 'esj' (see
http://www.appwebserver.org/products/ejs/ejs.html)

The justification for including this scripting language is that it
should make it much easier to write a high quality web interface for
Samba4. The scripting language can call into any Samba4 library code
(so for example it will be able to make ldb and loadparm calls), plus
it provides easy support for forms, cookies, sessions etc.

There is still quite a bit more work to do on the web server, but
there is enough here now for people to look at and comment. I will be
committing some sample web pages that test esp functionality shortly.
(This used to be commit 26f0ba92c0c565ac9e4cb5a079d795d4262497dd)
2007-10-10 13:17:01 -05:00
Andrew Bartlett
7c8284fefc r6902: Turn the LDAP server on by default. It is no worse than the others...
(no ACL support)

Andrew Bartlett
(This used to be commit 9f895f6482e45dd975baea7114748b65dbe6e688)
2007-10-10 13:16:56 -05:00
Andrew Tridgell
a8c26fa4ac r6724: added "cldap port" smb.conf parameter
(This used to be commit 04af0e7c5de467a24b965ce1de2fb07621133164)
2007-10-10 13:16:37 -05:00
Andrew Tridgell
320eeed1ef r6619: realm should not be forced uppercase
(This used to be commit 93e70717c7cb6aa591d3d83a70e5df03822fa17c)
2007-10-10 13:16:31 -05:00
Andrew Tridgell
a47cb58c2f r6184: the beginnings of the libcli/dgram/ library, and the dgram
server. Currently just listens on port 138 and parses the packets
(using IDL like the rest of NBT). This allows me to develop the
structures and test with real packets
(This used to be commit 10d64a525349ff96695ad961a3cfeb5bc7c8844f)
2007-10-10 13:11:24 -05:00
Stefan Metzmacher
c13baabc91 r5502: announce us as a print server by default
metze
(This used to be commit ac062a29799665121c15f60a8f5d25a3c68e51ae)
2007-10-10 13:10:51 -05:00
Jelmer Vernooij
4d10f2a86a r5491: Don't load the DCOM-specific services by default (yet)
(This used to be commit e2cbe16c1e4e3912ecdccc6480a147478fff3d9e)
2007-10-10 13:10:50 -05:00
Andrew Tridgell
8c76eb2672 r5395: fixed some loadparm memory leaks
(This used to be commit b75f8fe1844c539d8a4e369225bcbe0e6f81e9de)
2007-10-10 13:09:51 -05:00
Andrew Tridgell
a065adeacb r5389: initialise the WINS ttl max/min values to something sensible
(This used to be commit ee61fab163ed7faccef908d7458a2038fdad0887)
2007-10-10 13:09:50 -05:00
Andrew Tridgell
0487eee93a r5346: - a bit more preparation for the WINS server going in
- more NBT packet asserts, to ensure that incoming requests have all
  the elements we depend on

- open the WINS database at startup if we are configured as a WINS server

- split out the nbtd server reply packet generation code so it can be
  shared by the WINS server

- re-did the logic of what is answered by the WINS server and what by
  the B node server. It now always tries to answer by the B node, and
  only "recurses" to the WINS server for names that are not found.
(This used to be commit 5613e6b8ad9b32639caf5055f793dbc4d0a2fc19)
2007-10-10 13:09:44 -05:00
Andrew Tridgell
75ddf59ea1 r5308: trimmed back a lot of the old macros from smb_macros.h
(This used to be commit bf43c9bdcf9e654d123f6a2b29feb9189ca9e561)
2007-10-10 13:09:40 -05:00
Andrew Tridgell
35537c1255 r5302: fixed a compilation problem on solaris caused by the recent include
changes
(This used to be commit e7e015f79b10c353848a17f31c91a0593790a560)
2007-10-10 13:09:39 -05:00
Andrew Tridgell
fedf0b0d91 r5296: - only include the tdb headers where they are needed
- removed the u32 hack in events.c as I think this was only needed as
  tdb.h defines u32. Metze, can you check that this hack is indeed no
  longer needed on your suse system?
(This used to be commit 6f79432fe656164d4770dbce114a30dda5e7bf9a)
2007-10-10 13:09:38 -05:00
Andrew Tridgell
db4ba6e690 r5221: replace the str_list_*() code with new code based on talloc(). This is
a precursor to adding the wins client code in the nbt server.
(This used to be commit e8e499755ab667015740b35a7787134ebe852954)
2007-10-10 13:09:32 -05:00
Andrew Tridgell
b8ab357df9 r5115: enable the nbt daemon by default
(This used to be commit 4c0cc5fc11241c8a19081c4944b162c29da31603)
2007-10-10 13:09:24 -05:00