1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-07 00:58:40 +03:00

3164 Commits

Author SHA1 Message Date
Günther Deschner
6864828d9d s3: use shared registry functions.
Guenther
2010-04-27 16:42:15 +02:00
Günther Deschner
dbfff90185 s3: fix some build warnings.
Guenther
2010-04-26 22:53:00 +02:00
Günther Deschner
7259762909 s3: use generated rap header.
Guenther
2010-04-26 22:52:59 +02:00
Volker Lendecke
abdb96b8ff s3: Implement "net rpc user setprimarygroup" 2010-04-26 17:10:31 +02:00
Jim McDonough
61bdffbf8e Fix i18n of net conf import error message.
Thanks gd
2010-04-20 17:45:06 -04:00
Jim McDonough
a22f03e02c Display an error on net conf import failures.
When something goes wrong, such as a typo in a parameter
name, we'll now display the failure instead of just returning
with -1 and no message.
2010-04-20 16:28:47 -04:00
Günther Deschner
63b111bd32 s3: add iconv_convenience handle to pull/push sz helpers.
Guenther
2010-04-09 18:33:45 +02:00
Volker Lendecke
9ecc30837b s3: Slightly simplify unmap_unix_group 2010-03-28 19:05:36 +02:00
Jeremy Allison
fac8ca52ad Fix bug #7240 - Net usershare is not case sensitive.
Updates usershare files in a backwards compatible way.
I don't intend to back port this fix to 3.5.x as it
depends on a version upgrade in the share_info.tdb share security database.

Jeremy.
2010-03-26 17:09:58 -07:00
Kai Blin
e968db6739 s3 ntlm_auth: Don't malloc data that will be talloc_free()d
This fixes bug #7290
Thanks to Mohan <mohann@silver-peak.com> for the bug report.
2010-03-26 13:43:21 -07:00
Stefan Metzmacher
dee63fe4ca s3:ntlmssp: use client.netbios_name instead of workstation
metze

Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:56 +01:00
Stefan Metzmacher
ca2a5693bf s3:ntlmssp: rename void *auth_context; into void *callback_private;
metze

Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:55 +01:00
Stefan Metzmacher
7c0ea293f9 s3:ntlmssp: remove unused get_global_myname() and get_domain() from ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.

metze

Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:55 +01:00
Stefan Metzmacher
7d977da925 s3:ntlmssp: pass names and use_ntlmv2 to ntlmssp_client_start() and store them
Inspired by the NTLMSSP merge work by Andrew Bartlett.

metze

Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:55 +01:00
Stefan Metzmacher
eb17809812 s3:ntlmssp: pass names to ntlmssp_server_start() and store them in ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.

metze

Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:54 +01:00
Karolin Seeger
a6bfc1a2d0 s3-testparm: Throw warning when 'workgroup' and 'netbios name' are identical.
Address bug #7285 (NetBIOS Namespace Clash Handling).

Karolin
2010-03-24 15:09:23 +01:00
Günther Deschner
0d8ab38055 s3: fix buildwarning in smbta-util.
Guenther
2010-03-16 22:28:03 +01:00
Andreas Schneider
f98941033d Fix developer build, remove malloc 2010-03-16 13:27:00 -04:00
Jim McDonough
9447f863d2 Don't exit(0) on error 2010-03-16 09:58:34 -04:00
Holger Hetterich
5b7179d2a3 Add smbta-util to manage the encryption key.
This program allows the administrator to enable or disable AES
encryption when using vfs_smb_traffic_analyzer. It also generates new
keys, stores them to a file, so that the file can be reused on another
client or server.
2010-03-16 09:52:10 -04:00
Michael Adam
c27c430b21 s3:smbcacls: also honour the "--sddl" flag when setting ACLs.
Michael
2010-03-16 00:12:25 +01:00
Volker Lendecke
e3913084cd s3: Add "net registry increment"
A convenience function to increment a DWORD value under a (cluster-wide) lock
2010-03-12 16:55:28 +01:00
Volker Lendecke
79100c2421 s3: Add "g_lock_do" as a convenience wrapper function 2010-03-12 14:23:25 +01:00
Volker Lendecke
1728b5fa6f s3: Actually use mem_ctx in net_g_lock_init() 2010-03-12 12:12:42 +01:00
Volker Lendecke
67d1b01590 s3: Fix some "net registry" usage messages 2010-03-12 11:47:37 +01:00
Volker Lendecke
89c785c47a s3: Fix a long-standing problem with recycled PIDs
When a samba server process dies hard, it has no chance to clean up its entries
in locking.tdb, brlock.tdb, connections.tdb and sessionid.tdb.

For locking.tdb and brlock.tdb Samba is robust by checking every time we read
an entry from the database if the corresponding process still exists. If it
does not exist anymore, the entry is deleted. This is not 100% failsafe though:
On systems with a limited PID space there is a non-zero chance that between the
smbd's death and the fresh access, the PID is recycled by another long-running
process. This renders all files that had been locked by the killed smbd
potentially unusable until the new process also dies.

This patch is supposed to fix the problem the following way: Every process ID
in every database is augmented by a random 64-bit number that is stored in a
serverid.tdb. Whenever we need to check if a process still exists we know its
PID and the 64-bit number. We look up the PID in serverid.tdb and compare the
64-bit number. If it's the same, the process still is a valid smbd holding the
lock. If it is different, a new smbd has taken over.

I believe this is safe against an smbd that has died hard and the PID has been
taken over by a non-samba process. This process would not have registered
itself with a fresh 64-bit number in serverid.tdb, so the old one still exists
in serverid.tdb. We protect against this case by the parent smbd taking care of
deregistering PIDs from serverid.tdb and the fact that serverid.tdb is
CLEAR_IF_FIRST.

CLEAR_IF_FIRST does not work in a cluster, so the automatic cleanup does not
work when all smbds are restarted. For this, "net serverid wipe" has to be run
before smbd starts up. As a convenience, "net serverid wipedbs" also cleans up
sessionid.tdb and connections.tdb.

While there, this also cleans up overloading connections.tdb with all the
process entries just for messaging_send_all().

Volker
2010-03-10 16:07:10 +01:00
Volker Lendecke
5a3633faf1 s3: Fix the build of net_afs.c with --fake-kaserver=yes, bug 7216
Thanks to Geza Gemes <geza@kzsdabas.hu> for filing this bug
2010-03-06 13:00:53 +01:00
Volker Lendecke
fce6e1def8 s3: Make "smbcontrol xx debuglevel" print the correct cluster pid 2010-03-05 17:07:57 +01:00
Günther Deschner
a99ac4f236 s3-net: fix net after spoolss_EnumPrinterDataEx IDL change.
Guenther
2010-03-05 15:18:01 +01:00
Günther Deschner
37ca9288d2 s3-net: fix net after spoolss_SetPrinterData{Ex} IDL change.
Guenther
2010-03-05 15:17:59 +01:00
Karolin Seeger
340797f3fa Fix typo in comments. 2010-03-03 16:03:13 +01:00
Michael Adam
27ae935a8d s3:net: add a command "net registry setsd_sdd"
This permits to set the security descriptor of a registry
key from the unix command line.

Michael
2010-03-03 09:16:38 +01:00
Michael Adam
6f4bdbccf7 s3:net: fix some i18n messages in net_registry_getsd_internal().
Michael
2010-03-03 09:16:38 +01:00
Michael Adam
d8b828d4a9 s3:net: add i18n macro _() to one message
Michael
2010-03-03 09:16:38 +01:00
Michael Adam
caa27bb165 s3:net: add new subcommand "net registry getsd_sddl" to print secdesc in sddl format
Michael
2010-03-03 09:16:37 +01:00
Michael Adam
93d438d970 s3:net: refactor getting of secdesc out of net_registry_getsd()
New net_registry_getsd_internal does the work(),
net_registry_getsd() just prints the result.
This in preparation to add support for other output formats
than the currently used display_sec_desc().

Michael
2010-03-03 09:16:36 +01:00
Michael Adam
9cea4d5969 s3:smbcacls: add switch "--sddl" to output acls as sddl encoded strings 2010-03-03 09:16:35 +01:00
Holger Hetterich
e3c2e1a303 s3: net_share.c: fix argc handling
The "net share" command was no longer possible because it enters
the net_share function with argc == 0.
2010-03-02 15:27:58 -08:00
Volker Lendecke
d6a6872506 s3: Abstract access to sessionid.tdb, similar to conn_tdb.c 2010-03-01 17:53:22 +01:00
Volker Lendecke
8bebb380e8 s3: Add connections_forall_read()
In a cluster, this makes a large difference: For r/w traverse, we have to do a
fetch_locked on every record which for most users of connections_forall is just
overkill.
2010-03-01 14:51:34 +01:00
Simo Sorce
61b7a24f16 s3 move the sitename cache in its own file 2010-02-23 12:46:26 -05:00
Volker Lendecke
c31cf0a1b5 s3: Consolidate some pid_to_procid() calls to procid_self() 2010-02-23 17:20:28 +01:00
Volker Lendecke
752bffc53f s3: Consolidate server_id_self into the equivalent procid_self() 2010-02-23 15:30:00 +01:00
Holger Hetterich
6ec6fa0ac4 s3: eventlogadm.c: add -s option to use alternative config file.
Update the manpage accordingly.
2010-02-15 08:31:44 +01:00
Andrew Tridgell
862a17e9ba s3: last part of TYPESAFE_QSORT() conversion
convert smbcacls, sharesec and web/
2010-02-14 18:44:21 +11:00
Volker Lendecke
b00d223f87 s3: Fix Coverity ID 629: DEADCODE
We have already returned if (argc < 1) above
2010-02-13 17:47:43 +01:00
Michael Adam
09f3ed1024 s3:make "net conf addshare" atomic by wrapping all writes in one transaction
Michael
2010-02-12 23:12:12 +01:00
Volker Lendecke
a66c40ff38 s3:dbwrap: If "-n" is given to dbwrap_torture, open db with CLEAR_IF_FIRST 2010-02-12 23:12:10 +01:00
Volker Lendecke
4c1c3f2549 s3: Implement global locks in a g_lock tdb
This is the basis to implement global locks in ctdb without depending on a
shared file system. The initial goal is to make ctdb persistent transactions
deterministic without too many timeouts.
2010-02-12 23:12:09 +01:00
Günther Deschner
89c089d993 s3-net: fix net ads dns usage calls.
Bjoern, please check.

Guenther
2010-02-08 11:55:52 +01:00