1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-23 00:23:53 +03:00
Commit Graph

64 Commits

Author SHA1 Message Date
Jeremy Allison
2b85d3570c Fix the NTSTATUS -> WERROR for srvsvc pipe.
Jeremy.
-
Tim Potter
6a58c9bd06 Removed version number from file header.
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
-
Jeremy Allison
3dec9cf99a When re-writing tdb version numbers as little endian int32, we must
change the version number also.
Jeremy.
-
Jeremy Allison
ec71f1732b Fixed all uses of tdb_fetch/store/_int to use explicit int32 little endian
in tdb's. All except winbindd_idmap.... Hmmmmmm.
Jeremy.
-
Jeremy Allison
a0cdec3acc Fixed nasty cast of tdb_delete in traversals.
Jeremy.
-
Andrew Tridgell
48aa90c48c - portablitity fixes for cc -64 on irix
- fixed gid* bug in rpc_server
-
Martin Pool
22e510ea0d Add an output parameter to message_send_all that says how many
messages were sent, so you know how many replies to expect.

Const and doc religion.
-
Jeremy Allison
fe288b14cc Sorry. I broke the build, missed on open_directory call.
Jeremy.
-
Martin Pool
79ec88f0da Store some path names in global variables initialized to configure
default, rather than in preprocessor macros.
-
Andrew Bartlett
f70fb819b2 This is a farily large patch (3300 lines) and reworks most of the AuthRewrite
code.

In particular this assists tpot in some of his work, becouse it provides the
connection between the authenticaion and the vuid generation.

Major Changes:
	- Fully malloc'ed structures.
	  - Massive rework of the code so that all structures are made and destroyed
	    using malloc and free, rather than hanging around on the stack.
	- SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them
	   to be declared 'invalid' without the chance that people might get ROOT by
	   default.

	- kill off some of the "DOMAIN\user" lookups.  These can be readded at a more
	  appropriate place (probably domain_client_validate.c) in the future. They
	  don't belong in session setups.

	- Massive introduction of DATA_BLOB structures, particularly for passwords.

	- Use NTLMSSP flags to tell the backend what its getting, rather than magic
	  lenghths.

	- Fix winbind back up again, but tpot is redoing this soon anyway.

	- Abstract much of the work in srv_netlog_nt back into auth helper functions.

This is a LARGE change, and any assistance is testing it is appriciated.

Domain logons are still broken (as far as I can tell) but other functionality
seems
intact.

Needs testing with a wide variety of MS clients.

Andrew Bartlett
-
Jeremy Allison
8d23a7441b Merge the become_XXX -> change_to_XXX fixes from 2.2.2 to HEAD.
Ensure make_conection() can only be called as root.
Jeremy.
-
Jeremy Allison
3b56239c51 Back-out the share acl fix. Not needed (Gerald has been telling porkies
again :-) :-).
Jeremy.
-
Jeremy Allison
4d57c7520f Fix bug where removing root from a share SD stops further edit access.
Jeremy.
-
Tim Potter
2d0922b0ea Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header. -
Jeremy Allison
bca6419447 Added Elrond patch to make se_access_check use NT datastructures, not Samba.
Jeremy.
-
Andrew Bartlett
d103371e80 fix debug -
Andrew Bartlett
00c667c0ad Reverse some of the breakage I commited a day or two ago, as we need to
fill out the user_info struct (otherwise we don't have a vuid for
make_connection()).

Also add a become_user() call, becouse it really looks like it was missing
(we must pass it anyway to finish make_connection()).

Is there any reason not to be the user when reading an ACL?

Finally, fix up some formatting to show that the two functions are almost
identical.

Andrew Bartlett
-
Andrew Bartlett
0e1322227b Looks like it missed these. make_connection now no longer takes a 'username'
argument.
-
Andrew Bartlett
fb0c3629c3 Kill off the //server/share%user hack in share level security.
This should help make much of this code simpiler.

Andrew Bartlett
-
Andrew Tridgell
b8651acb9c - enable MSDFS by default, there seems no reason not to have it enabled
by default in Samba 3.x

- got rid of some unused parameters in Makefile.in

- declare DEBUGLEVEL in debug.h rather than in each file
-
Andrew Tridgell
c26e0d3f27 got rid of USE_TDB_MMAP_FLAG as its not needed any more -
Andrew Tridgell
1d36250e33 converted another bunch of stuff to NTSTATUS -
Simo Sorce
3e60636f2b some %things are not expanded properly in get share info levels -
Jeremy Allison
800e46ea7e Added Jim McDonough's Win9x take ownership fix.
Jeremy.
-
Tim Potter
5f5ed41ee8 Replaced the duplicate DOS constants with appropriate ones from doserr.h to
emphasise the fact that the spoolss pipe returns DOS error codes instead of
32-bit nt status codes.
-
Jeremy Allison
840802f106 Added "use mmap" for HPUX.
Jeremy.
-
Andrew Tridgell
debb471267 The big character set handling changeover!
This commit gets rid of all our old codepage handling and replaces it with
iconv. All internal strings in Samba are now in "unix" charset, which may
be multi-byte. See internals.doc and my posting to samba-technical for
a more complete explanation.
-
Jeremy Allison
2f8b84bda0 Fixed extra file_free calls - my fault :-(.
Jeremy.
-
Andrew Bartlett
5d3f622375 This fix from Eelco Vriezekolk <eelco@nexus.com.na> is for a SIG11 bug where we
would always file_free(fsp) twice, once in close_file and once afterwoulds.

The bug was reported in SAMBA_2_2, but a code inspection shows it to be in HEAD
as well.  (Unfortunetly I don't have the facilites to actualy check this, but
the change is quite simple, makes sence and compiles).

Andrew Bartlett
-
Herb Lewis
45bf995bf6 SGI compiler fixes.
Jeremy
-
Tim Potter
d936ffedd9 Cosmetic fixups found while playing with the server manager. Added support
for NET_SRV_SET_INFO rpc call which is made when double-clicking on a
computer in the server manager and changing the description.  We always
return NT_STATUS_NOPROBLEMO as NT doesn't seem to decode any error messages
passed back.

Maybe the changed comment string could be stored in a tdb and regurgitated
instead of the "server string" smb.conf parameter?
-
Jeremy Allison
5b2ffd160f Fix from "Jim McDonough" <jmcd@us.ibm.com>" - when we use open_file_shared(),
we need to close with close_file().
Jeremy.
-
Jeremy Allison
5b1245f803 Only try and open a directory if we get EISDIR.
Jeremy.
-
Jeremy Allison
66f959e0ff rpc_server/srv_srvsvc_nt.c: Don't test an uint32 for < 0.
utils/smbcacls.c: Set enum correctly.
Jeremy.
-
Jeremy Allison
70194b194e Added "Jim McDonough" <jmcd@us.ibm.com> patches for directory support
for Win9x.
Jeremy.
-
Jeremy Allison
5690ec77c8 Modified version of Jim's 0x27 and 0x28 Win9x Secdesc patch.
Jeremy.
-
Andrew Tridgell
8ec9c87b5d use LDSHFLAGS not -shared in several places -
Jeremy Allison
9a85dc9cdb Remove embedded '/*' in comment.
Jeremy.
-
Andrew Tridgell
4c456c8264 fixed comment-in-comment -
Jeremy Allison
9b3dd80176 Added code from "Nigel Williams" <nigel@veritas.com> (yes, the same famous
Nigel Williams who did NIS/GINA !) to implement add/modify/delete shares
for Win2k. Needs testing as I made a few mods to the original code.
Jeremy.
-
Jeremy Allison
fc76681812 Merge of Andrew's changes in 2.2.
Jeremy.
-
Jeremy Allison
e7d59d6de8 As Andrew suggested, make smbrun return a fd for a deleted file which can then
be read.
Jeremy.
-
Jeremy Allison
20b13bafdf Fix for core dump in security = share code with new share security db.
Jeremy.
-
Jeremy Allison
3c4c649951 passdb/pass_check.c: Ensure second check is done only if given username is all in caps.
rpc_server/srv_srvsvc_nt.c: Added "CONFIGFILE" arg to scripts so path to smb.conf is given.
Jeremy.
-
Jeremy Allison
ae9eda5c3c Use message system to notify when smb.conf is updated.
Jeremy.
-
Jeremy Allison
6b75d79c4b Removed "read only" arg as it isn't useful.
Jeremy.
-
Jeremy Allison
b4cbdcb644 Tidy up return codes for server manager.
Jeremy.
-
Jeremy Allison
aae44ee41f Get/Set of SD's on shares now works. Correctly ensure scripts exist before
calling.
Jeremy.
-
Jeremy Allison
04976c32f3 Set SD's for share. Added level 1501. Map GENERIC file bits to specific bits.
Jeremy.
-
Jeremy Allison
2f34e144c5 Ensure Everyone/All access is mapped correctly to file generic perms to allow
anonymous IPC access.
Jeremy.
-