1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-14 19:24:43 +03:00

2854 Commits

Author SHA1 Message Date
Jelmer Vernooij
a0fa682faa r3861: - Put ndr and rpc client code in seperate files
- Add some const
(This used to be commit a00bda88e1b6abdc36e5aa8c2a35f64855f67c96)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
be01250d1a r3838: use "security.NTACL" instead of "security.NTAcl" for the xattr name for ACLs
(This used to be commit db72290bbe87644a89385c465855629a1f881e4f)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
9b6c08a0d1 r3837: added support for LsaLookupSids in the LSA rpc server. This allows the GUI ACL editor on w2k to
correctly display names instead of SIDs.
(This used to be commit fdaa753578c7b80806d4040ed131f87ddbf988e0)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
0b691afe81 r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans server
- fixed revision number on default DACL

- fixed DACL_PRESENT bit in acl query

with these fixes cacls.exe and the GUI ACL editor in w2k both work
against pvfs. The GUI editor is slow as it times out looking up the
SID -> name mappings.
(This used to be commit 4468018cb63fd884920c2b0f5235bded50c6b5db)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
85215a9a26 r3835: - added testing of setting an initial ACL on a file using NTTRANS create
- added support for initial ACLs in pvfs backend
(This used to be commit 05ee9179f74d243aa22fa00be7873c5db76a8ad1)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
837909e3ab r3834: - fixed XATTR_NTACL_NAME
- pvfs now passes RAW-ACLS
(This used to be commit 2e19edaa4ebc96b3e95e0b55c4fae8eaefd642b2)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
82da254ece r3833: NTACL is a better xattr name than DosAcl (tpot suggested this)
(This used to be commit 17911eea5995c12a2300dd3928612c77f8f0883e)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
bc7b4abc3a r3832: added NT ACL query/set to the posix NTVFS backend. The default ACL is
based on the current nttoken, which is completely wrong, but works as a start.

The ACL is stored in the xattr system.DosAcl, using a NDR encoded IDL
union with a version number to allow for future expansion.

pvfs does not yet check the ACL for file access. At the moment the ACL
is just query/set.

We also need to do some RPC work to allow the windows ACL editor to be
used. At the moment is queries the ACL fine, but displays an error
when it fails to map the SIDs via rpc.
(This used to be commit 3a1f20d874ab2d8b2a2f2485b7a705847abf1263)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
3c25dfe789 r3831: added nttrans server code for query/set security descriptor. This
means ACLs now can be set/fetched from the CIFS NTVFS backend.
(This used to be commit f49c636e10f1e4bba506baadb67a0e288f1717c4)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
012be92f0a r3830: unified the query/set security descriptor code with the rest of the
queryfileinfo/setfileinfo logic, so querying/setting a security
descriptor is treated as just another file query/set operation.

This will allow NTVFS backends to see the query/set security
descriptor operations as RAW_FILEINFO_SEC_DESC and
RAW_SFILEINFO_SEC_DESC operations.
(This used to be commit f68a6b6b915c37e48c42390c1e74c2d1c2636fa9)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
bbf009b46f r3829: added a RAW-ACLS test suite that tests query/set of ACLs on a file
(This used to be commit 2ff9816ae0ae41e0e63e4276a70d292888346dc7)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
cae123912c r3828: added testing of opening an existing file with EAs (the EAs are ignored)
(This used to be commit 6d53c6a0aed31c87b47e5248f22b1e5767fad342)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
6695019d02 r3827: fixed copyright notices to remove simo and lkcl who have no code left in this file
(This used to be commit c75eb859391f747abc3fe513166c9f8d73ca349c)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
5f868bc1ac r3826: - added testing of ea lists in NTTRANS CREATE
- fixed push/pull of chained ea lists

- fixed a bug in the nttrans wire encoding
(This used to be commit fcd09224076508f9c10095bf2e2c394232a4d297)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
5efd740d4d r3821: added client side code and test code for NTTRANS_CREATE
(This used to be commit 8422789c06c203ea1c4761fecb16f79f99ac479b)
2007-10-10 13:05:56 -05:00
Stefan Metzmacher
856ee66537 r3810: create a LIB_SECURITY subsystem
- move dom_sid, security_descriptor, security_* funtions to one place
  and rename some of them

metze
(This used to be commit b620bdd672cfdf0e009492e648b0709e6b6d8596)
2007-10-10 13:05:56 -05:00
Stefan Metzmacher
04a47a26ce r3809: fix compiler warning
metze
(This used to be commit 241404474665b870d2dfdb684aa45e2e2716e1fe)
2007-10-10 13:05:56 -05:00
Andrew Bartlett
0f569bd58c r3808: Put these in the same order as the IDL, to make it easier to spot what's unimplemetned (tests of the group members)
Andrew Bartlett
(This used to be commit 3b81305e2b7ee3e6acabcd8b0e9ed121d4b08840)
2007-10-10 13:05:56 -05:00
Andrew Bartlett
5ad5c6cc70 r3807: Cross-check the basic attributes for groups and aliases in RPC-SAMSYNC.
Andrew Bartlett
(This used to be commit 90398fda41dd15480899e3628df186eb02fdc139)
2007-10-10 13:05:56 -05:00
Andrew Tridgell
696fdc8cf9 r3806: added support to smb_server and pvfs for the NTTRANS Create call. This
call has an optional sec_desc and ea_list.
(This used to be commit 8379ad14e3d51a848a99865d9ce8d56a301e8a3c)
2007-10-10 13:05:56 -05:00
Andrew Bartlett
91e94014be r3805: Fix the LSA portions of the RPC-SAMSYNC test - I was not using the LSA
secrets interface correctly.  (New interface added).

Andrew Bartlett
(This used to be commit 994ac7f031e2b2d528595a4a0a446d92074d6ecf)
2007-10-10 13:05:55 -05:00
Andrew Bartlett
9aec081fd9 r3804: Add more comparison tests in RPC-SAMSYNC.
This compares values for the domain and for secrets.  We still have
some problems we need to sort out for secrets.

Also rename a number of structures in samr.idl and netlogon.idl, to
better express their consistancy.

Andrew Bartlett
(This used to be commit 3f52fa3a42b030c9aef21c8bd88aad87a0aae078)
2007-10-10 13:05:55 -05:00
Andrew Tridgell
db95baf55e r3803: fixed detection of xattr support
(This used to be commit b7e4ec4550dd2d15714784e5fb29789be9ca8623)
2007-10-10 13:05:55 -05:00
Andrew Tridgell
f4e5f3a498 r3801: added allocation size rounding. This is needed for ifstest.
(This used to be commit 8a6fa43156667f75e058c7d44b1c15a6cf7067b2)
2007-10-10 13:05:55 -05:00
Andrew Tridgell
856f663adc r3800: - fixed delete-on-close behaviour for streams
- added a delete-on-close test to RAW-STREAMS

- don't allow rename of streams at the moment (I need to work out if
  its supposed to be allowed first)
(This used to be commit f4b2b1311da6e37ac0947a3419d89c77ebbd6b63)
2007-10-10 13:05:55 -05:00
Andrew Tridgell
5a34ef4df6 r3799: - added the bit for FS_ATTR_NAMED_STREAMS support into qfsinfo filesystem attribute reply
- pvfs passes the RAW-STREAMS test
(This used to be commit c1a48a7542a52df734b54031f405d574e4c891e3)
2007-10-10 13:05:55 -05:00
Andrew Tridgell
ae7caf08c1 r3798: added support for alternate data streams in xattrs into pvfs.
The trickiest part about this was getting the sharing and locking
rules right, as alternate streams are separate locking spaces from the
main file for the purposes of byte range locking, and separate for
most share violation rules.

I suspect there are still problems with delete on close with alternate
data streams. I'll look at that next.
(This used to be commit b6452c4a2068cf7e837778559da002ae191b508a)
2007-10-10 13:05:54 -05:00
Andrew Tridgell
ca90965a3a r3793: add some streams tests that show how the :$DATA suffix is handled
(This used to be commit 41d8c95c94291e73fae1541543d6ce02b81c0c46)
2007-10-10 13:05:54 -05:00
Andrew Tridgell
285db33399 r3792: improved the posix -> nt error mapping, so we get things like
NT_STATUS_HOST_UNREACHABLE instead of NT_STATUS_UNSUCCESSFUL
(This used to be commit f2a488e5668ab5d262269f1bab1b33a63265cbe9)
2007-10-10 13:05:54 -05:00
Andrew Tridgell
7f340a2997 r3791: fixed declaration of torture_rpc_login
(This used to be commit fc9748841ec439a097e9713e1b60dbcd647469e2)
2007-10-10 13:05:53 -05:00
Jelmer Vernooij
46badf1908 r3790: use a registration function that is called from dcerpc_*_init functions
rather then a large table in librpc/gen_ndr/tables.c. This will allow us
to only link in only the required gen_ndr files (speeds up linking quite a
bit, makes binaries smaller).

Each gen_ndr_* file now has a init function that calls the init functions
of the interfaces it contains. I did it this way to keep pidl's code simple,
though it might hurt startup time a bit. I'd be happy to change it if
people like one function better.
(This used to be commit 3c436590ae95b58ad6d00e72d6fdd08a4d80f208)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
83d29e9bac r3789: - fix error handling
- formating changes

metze
(This used to be commit 7bb3e3751b1193cd16e6ff8aa468b36c823c1cd5)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
fa8f1c1ffe r3788: give new accounts and groups a objectGUID
metze
(This used to be commit 4839ea156fea95743127753c194fbc23ccf732fd)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
c3eb37f292 r3787: a function to generate a random GUID
metze
(This used to be commit 8bd2e3cb4e5123a3e26965b8535e16ee18005714)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
4af8f37d64 r3786: send a mechListMIC to make the current samba3 client happy
metze
(This used to be commit 2403186562698b8e13c20741a0cbed812e1b8e89)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
536601aeba r3785: this strings are not const
metze
(This used to be commit 436da375a2a815926aaa0565120a4750ead37cb0)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
43f500244b r3784: do a samdb lookup for the DsCrackNames server
metze
(This used to be commit a2776eca83117131f8316ca222a2f385ffa5d7d5)
2007-10-10 13:05:53 -05:00
Stefan Metzmacher
8a18778286 r3783: - don't use make proto for ldb anymore
- split ldh.h out of samba's includes.h

- make ldb_context and ldb_module private to the subsystem

- use ltdb_ prefix for all ldb_tdb functions

metze
(This used to be commit f5ee40d6ce8224e280070975efc9911558fe675c)
2007-10-10 13:05:52 -05:00
Stefan Metzmacher
e81157c737 r3782: use ldb_ namespace
metze
(This used to be commit 9003698e0fba28551d41d41dec159cc9c42ce7d2)
2007-10-10 13:05:52 -05:00
Stefan Metzmacher
e2ebe81087 r3770: - fix endless recursion loop in spnego fallback code
- fix compiler warnings

metze
(This used to be commit 37a8bd2e30cab98bc8b1bf10d0a516827cbb3373)
2007-10-10 13:05:52 -05:00
Stefan Metzmacher
55d195f30b r3769: fix the build of shared libraries
metze
(This used to be commit 461ff03ce38c6bf6b90f95029287c6e6b01fc1e0)
2007-10-10 13:05:52 -05:00
Jelmer Vernooij
548c5e5f31 r3768: Fix build of libraries
(This used to be commit 9929aa94ef01eba64ccf41f4b22df0cdbe3e96b3)
2007-10-10 13:05:52 -05:00
Stefan Metzmacher
0a5ea499ec r3762: - only load the readed bytes into the input buffer
- fix compiler warnings with gcc-4.0

metze
(This used to be commit 7a931ea0f4884d866bbb05b7b81f8e0598364813)
2007-10-10 13:05:52 -05:00
Simo Sorce
57d2043479 r3760: mention -o switch in help message
(This used to be commit 0e7d8753101f22aa192ac5628675a0374484d0e9)
2007-10-10 13:05:52 -05:00
Simo Sorce
950f3eb508 r3757: Some fixes for ldb_ldap
Now we pass also the test-ldap tests :-)
(This used to be commit 0d58b1dc5aa0b00a924c1c5506f0c500c0b37b3e)
2007-10-10 13:05:51 -05:00
Volker Lendecke
e2bc9a47c0 r3756: Fix netbios session request reply. The buffer should not be a stack-based
variable that is overwritten later.

Samba3 smbclient still does not like Samba4. In ntlmssp samba3 smbclient
expects an mechlistmic that 4 does not send.

Volker
(This used to be commit 614dbd8fec09a5e4c63e4b7774aa38335e030a42)
2007-10-10 13:05:51 -05:00
Simo Sorce
79ebe463e2 r3755: add missing files
(This used to be commit 0b715b6ce21d23970d207d57e90133be17790d15)
2007-10-10 13:05:51 -05:00
Simo Sorce
679e95db03 r3754: merge in ldb modules support from the tmp branch ldbPlugins
(This used to be commit 71323f424b4561af1fdddd2358629049be3dad8c)
2007-10-10 13:05:51 -05:00
Jelmer Vernooij
5b397619cc r3753: Have some modules default to "NOT" and enable them again when
their dependencies are found
(This used to be commit 8e7e98ae5fca8be8c6a0b4c543b6828c46172171)
2007-10-10 13:05:51 -05:00
Jelmer Vernooij
39a6a2c600 r3752: Remove direct.pm for now (not used and breaks solaris build)
(This used to be commit f28638628a10fbb42276517527d681bd0b3f6217)
2007-10-10 13:05:51 -05:00