1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-25 06:04:04 +03:00

19967 Commits

Author SHA1 Message Date
Jeremy Allison
4ef1f8e425 r16971: Ensure we use the correct separator for pathnames
in POSIX mode (clitar needs fixing too). Add test
posix lock/unlock commands.
Jeremy.
(This used to be commit 596497ccc250896025253be1d67711d6d7f059f0)
2007-10-10 11:19:16 -05:00
Jeremy Allison
725d88b6d4 r16968: The function parse_processed_dfs_path() is dependent on the
fact that check_path_syntax() will convert '\\' characters to '/'.
When POSIX pathnames have been selected this doesn't happen, so we
must look for the unaltered separator of '\\' instead of the modified '/'.
Stevef please check this with the CIFSFS MS-DFS code !
Jeremy
(This used to be commit 883bb398e58f54ee79160487b49b79a4774ef939)
2007-10-10 11:19:16 -05:00
Jeremy Allison
760671b0e2 r16962: Add a few utility fns into client. Allow POSIX capabilities
to be selected.
Jeremy.
(This used to be commit 2d8d4bd77bac6f5e7865657e12affd8b94aa85c3)
2007-10-10 11:19:16 -05:00
Volker Lendecke
6dfccad564 r16960: Some warnings from host "opi"
(This used to be commit 083ef11cc9be8f1299f233bde194173e092e2c3c)
2007-10-10 11:19:15 -05:00
Gerald Carter
69f0c8aef1 r16957: fix cut-n-paste error. The check for 'if (\!salt)' make no sense when fetching the DES salting principal
(This used to be commit baf554c7934cbd591635196453c19d402358e073)
2007-10-10 11:19:15 -05:00
Volker Lendecke
361fef49c5 r16955: Fix an uninitialized var -- Jerry, please check.
(This used to be commit bf701f51294dacd0d4077b5304772c40119460eb)
2007-10-10 11:19:15 -05:00
Gerald Carter
751ad57534 r16954: Volker reminded me we already have code to do this check.
Reuse can_create() to prevent renameing a group to
an existing user or group.
(This used to be commit ce7091fda1eb3c7ea0900f455cec48c3b95a17f6)
2007-10-10 11:19:15 -05:00
Gerald Carter
7c1f79143b r16953: Don't allow groups to be renamed to an existing user or other group
(This used to be commit 7d619f127ee70fdd486ffaab4546a53d76a2288c)
2007-10-10 11:19:15 -05:00
Gerald Carter
060b155cd2 r16952: New derive DES salt code and Krb5 keytab generation
Major points of interest:

* Figure the DES salt based on the domain functional level
  and UPN (if present and applicable)
* Only deal with the DES-CBC-MD5, DES-CBC-CRC, and RC4-HMAC
  keys
* Remove all the case permutations in the keytab entry
  generation (to be partially re-added only if necessary).
* Generate keytab entries based on the existing SPN values
  in AD

The resulting keytab looks like:

ktutil:  list -e
slot KVNO Principal
---- ---- ---------------------------------------------------------------------
   1    6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32)
   2    6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5)
   3    6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5)
   4    6           host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32)
   5    6           host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5)
   6    6           host/suse10@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5)
   7    6               suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32)
   8    6               suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5)
   9    6               suse10$@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5)

The list entries are the two basic SPN values (host/NetBIOSName & host/dNSHostName)
and the sAMAccountName value.  The UPN will be added as well if the machine has
one. This fixes 'kinit -k'.

Tested keytab using mod_auth_krb and MIT's telnet.  ads_verify_ticket()
continues to work with RC4-HMAC and DES keys.
(This used to be commit 6261dd3c67d10db6cfa2e77a8d304d3dce4050a4)
2007-10-10 11:19:15 -05:00
Jeremy Allison
6d29166997 r16948: Sync the exmaples code from trunk.
Jeremy.
(This used to be commit 508ba05a8e4a7df8bf7f6ffe3d09a3c461026f78)
2007-10-10 11:19:14 -05:00
Jeremy Allison
65586c226c r16947: Fix warning with profile separator when profiles not
being used.
Jeremy.
(This used to be commit 441c289fd21d00398fb7c4c7c0338b03129a7545)
2007-10-10 11:19:14 -05:00
Jeremy Allison
fbdcf2663b r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need
to do the upper layer directories but this is what
everyone is waiting for....

Jeremy.
(This used to be commit 9dafb7f48ca3e7af956b0a7d1720c2546fc4cfb8)
2007-10-10 11:19:14 -05:00
Jeremy Allison
5bf62a0c3c r16943: Add Jim's code.
Jeremy.
(This used to be commit f131bf8f16fd8b7c49e6065ecbf6f8686b2f4269)
2007-10-10 11:19:13 -05:00
Günther Deschner
6139f49d60 r16941: Fix crash bug when the pam conversation receives an empty token.
Thanks to Bjoern Jacke for the report and test-case.

Guenther
(This used to be commit f2ebc0e3de396f44f49dabbfe42cb3ad1c1a7ec1)
2007-10-10 11:19:13 -05:00
Günther Deschner
510b81b428 r16940: libnscd sets errno, use that to display error message.
Guenther
(This used to be commit df10448e2c6166d1c129c2d9a9a74c5b4a42555f)
2007-10-10 11:19:12 -05:00
Günther Deschner
44f2d54db2 r16939: Still clear the winbind_cache.tdb when offline logons are not enabled.
Guenther
(This used to be commit 4121ccfc3e39001d5b7b8288e3bc27d919f79167)
2007-10-10 11:19:12 -05:00
Gerald Carter
5d80b1dcd5 r16927: back merge of a packaging fix for release numbers (from 3.0.23)
(This used to be commit 5b4c4928ac63d6872cf13c3cdc4a9a63405bbda4)
2007-10-10 11:19:12 -05:00
Volker Lendecke
66259d06fb r16866: No idea why I did not see the warning, sorry....
(This used to be commit 84913caebdb461fed2c94fadfa0039b32a83cb6d)
2007-10-10 11:19:12 -05:00
Volker Lendecke
3899f95e1f r16865: This is a proposal to fix bug 3915. Before sending patches around, this is
what svn is for.

The idea is that we fall back to a pure unix user with S-1-22 SIDs in the
token in case anything weird is going on with the 'force user'.

Volker
(This used to be commit 9ec5ccfe851ac8a1f88b88c8c8461a5cf75b4c57)
2007-10-10 11:19:12 -05:00
Volker Lendecke
fc4abcf028 r16864: Intermediate checkin -- swap the sid_check_is_in_unix_users and
sid_check_is_in_our_domain cases.

Volker
(This used to be commit dc403cec88d91fdeb09cbd04321d88bbdc0f490c)
2007-10-10 11:19:12 -05:00
Günther Deschner
7048040be8 r16862: Reverting accidential changes in ads_try_connect() from previous commit.
Guenther
(This used to be commit 6257f9af93f2391940b2c60fe39c0bf106de15dd)
2007-10-10 11:19:12 -05:00
Günther Deschner
f3e71c6072 r16861: Fixing crash bug when passing no domain/realm name to the CLDAP request.
Guenther
(This used to be commit 863aeb621afa7dcec1bfef8e503ef8ed363e3742)
2007-10-10 11:19:11 -05:00
Gerald Carter
03d116a1b7 r16845: Properly report the error during join when the set password fails
(This used to be commit ef6e9ca5276586c081fcf18bb178a2326309b539)
2007-10-10 11:19:11 -05:00
Günther Deschner
67d8c7432f r16836: When receiving a CLDAP reply make sure that we always store the correct
netbios domain name in server affinity cache.

Guenther
(This used to be commit 08958411eeff430fb523d9b73e0259d060bac17b)
2007-10-10 11:19:11 -05:00
Günther Deschner
57dd09939a r16823: Allow to call wbinfo --domain-info="" or --domain-info="." to get domain
info for our own domain.

Guenther
(This used to be commit ebd3c547e508e191d5e1b5bb001797666db7b269)
2007-10-10 11:19:11 -05:00
Simo Sorce
99a0d5ca1e r16800: correct a probable cut&paste error
(This used to be commit c139a2293bfb66554e1be09c6824d04381de58e1)
2007-10-10 11:19:11 -05:00
Günther Deschner
d1a9ac533b r16799: Fix remote smbd crash bug by removing half-implemented info level 4
dfs_Enum.

Guenther
(This used to be commit 4e5ea585c3482c38f2624e45f1268d3864a99faa)
2007-10-10 11:19:11 -05:00
Günther Deschner
3dc4d79a44 r16797: Add msdfs proxy junctions in the netdfs rpc enumeration.
Guenther
(This used to be commit 6bf350895a648ef9b824c94b894e8d7a8989eb97)
2007-10-10 11:19:11 -05:00
Günther Deschner
ed8a9c82fe r16790: Fix memleak.
Guenther
(This used to be commit 48ab7f46814dfbd777f142cdd8f59e6c1962eb15)
2007-10-10 11:19:10 -05:00
Jeremy Allison
192062c4a6 r16789: Fix bug #3909, when using ea's getting a directory tries to
read ea's from an msdfs link. Stop it from doing that.
Jerry please merge to 3.0.23.
Jeremy.
(This used to be commit 95e5ace6b4f348a3244b6a3ea0fd8badf55271f5)
2007-10-10 11:19:10 -05:00
Gerald Carter
26c0b81d75 r16785: BUG 3908: Fix rpc bin authentication failure which broke user password changes
Jeremy, please review.
(This used to be commit 154e4a281503f0cbc2e654640f1dfa4b4d35a3cd)
2007-10-10 11:19:10 -05:00
Volker Lendecke
355cbde8df r16766: A warning found by RHEL3. This might actually be 3.0.23 code, maybe there are
vasprintf implementations that don't like a NULL format.

Volker
(This used to be commit 03c665c307e518c9ff66096904873266b145637c)
2007-10-10 11:19:10 -05:00
Volker Lendecke
fe33a3829a r16755: Hunting warning has some benefits....
Solaris found this one that needs to go into 3.0.23, actually munlock the
password memory.

Volker
(This used to be commit 6fa928f96a70b7b063dd1bdbb08c6a3f5d942229)
2007-10-10 11:19:10 -05:00
Gerald Carter
46fab723d8 r16752: remove the 'socket options' setting from the shipped default smb.conf
(This used to be commit eac00a45efe96411ab8574b3a3d436a285b7e88a)
2007-10-10 11:19:10 -05:00
Gerald Carter
05089818a0 r16751: The precompiled header should really be in the $(buildir) and
not the $(srcdir) to allow multiple concurrent compiles when the
source tree is shared via nfs.
(This used to be commit b79e1c011d577581eebb90b95dbdee11f8a96c3b)
2007-10-10 11:19:09 -05:00
Gerald Carter
9d0ccba34c r16749: BUG 3905: don't fail in create_local_nt_token() when a
checking for the builtin Administrators group membership.
security = server has no domain info in secrets.tdb
(This used to be commit fa477969fbbcd9f707461a2d9015bebf719ddfbb)
2007-10-10 11:19:09 -05:00
Jeremy Allison
acebbb7cd9 r16720: Fix bug #3874 (warning) reported by Jason Mader.
Jeremy.
(This used to be commit 0606c954668a7bbc08e2338e268405981aa0ad04)
2007-10-10 11:19:09 -05:00
Günther Deschner
ce815f38a7 r16719: Automatically chase referrals, support LDAP fast bind exended operation
and LDAP domain scope control.

Guenther
(This used to be commit 6df2a39110a3ae9d2729907472bad30f48896c86)
2007-10-10 11:19:09 -05:00
Stefan Metzmacher
1f914279f9 r16717: patch from Bjoern Jacke to fix compiler warnings on AIX
metze
(This used to be commit a558abb40d9a0bcce568a336ce7e9f4ae5e066db)
2007-10-10 11:19:09 -05:00
Gerald Carter
c6f068355c r16713: BUG 3904: fix broken smbwrapper compile
(This used to be commit 9ae1d016d44492327d180fe5e629f3a81ddfe6e4)
2007-10-10 11:19:09 -05:00
Gerald Carter
be25a49a94 r16701: Fix segv when adding a printer caused by not initializing the
realm name in ads_init() in nt_printer_publish().
(This used to be commit a25e75e78db092b3992dfc6f7e2737023d43e2c3)
2007-10-10 11:19:09 -05:00
Jeremy Allison
d0b0ed90eb r16696: Fix the multiple-outstanding write and trans client
signing bug.
Jeremy.
(This used to be commit 3b7fbe856cea7cbb5bf91844f94f221be0a2c627)
2007-10-10 11:19:08 -05:00
Jeremy Allison
8bd19b15e3 r16687: Fix bugs #3901, #3902, #3903 reported by jason@ncac.gwu.edu.
Jeremy
(This used to be commit c4896b17faa6802f18cc1cec7fcc6168bde2eef0)
2007-10-10 11:19:08 -05:00
Jeremy Allison
8f0ea257b6 r16685: Fix bug #3901 reported by jason@ncac.gwu.edu.
Jeremy.
(This used to be commit d48655d9c0b31d15327655140c021de29873d2c5)
2007-10-10 11:19:07 -05:00
Jeremy Allison
ae30a44bc0 r16683: Fix bug #3900 reported by jason@ncac.gwu.edu.
Jeremy.
(This used to be commit 8c7e40f2a469df34aff0e63270a78e669d240b59)
2007-10-10 11:19:07 -05:00
Jeremy Allison
5e924c3962 r16681: Fix bug #3899 reported by jason@ncac.gwu.edu.
Jeremy.
(This used to be commit 1cd9a0ef834f8062500d1aea6183e147fc5e42f4)
2007-10-10 11:19:07 -05:00
Jeremy Allison
b85c276e95 r16678: Fix bug #3898 reported by jason@ncac.gwu.edu.
Jeremy.
(This used to be commit 5c5ea3152f8dbdfd7717b65e035191ffed3ec548)
2007-10-10 11:19:07 -05:00
Volker Lendecke
48229b35d7 r16676: .o generates other warnings, use the Solaris trick with .po.o also for AIX.
Fix a configure.in output line

Volker
(This used to be commit 1a80266d77bb95edaa221c14652b2c6fa9932ab6)
2007-10-10 11:19:07 -05:00
Jeremy Allison
d88926f6b4 r16665: Fix a couple of bugs I discovered now I've looked
closer at the wins server code. Firstly, it needs
to do the searches on the SELF_NAMES correctly,
secondly it needs to flush the in-memory cache
out before returning the 1b names - else it might
get duplicates returned if many 1b queries are
done in quick succession. Jerry, I hate to say
this but you might want to consider this for 3.0.23....
Jeremy.
(This used to be commit b36b9befbbc4ac318168b7788d3722710ecbf10f)
2007-10-10 11:19:07 -05:00
Jeremy Allison
124cd3c604 r16663: Fix coverity #301, memleak in error path.
Jeremy.
(This used to be commit dfdb4ce89155dc1528b455252751616cc2c6708c)
2007-10-10 11:19:06 -05:00