1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-09 08:58:35 +03:00

3227 Commits

Author SHA1 Message Date
Andrew Tridgell
62560e65bd r4454: This is the patch I use to Samba3 nmbd to allow a WinXP box
to join a Samba4 domain. It is hard-coded for my GUID, so
you will need to edit it to suit.

I'm committing this so others can experiment. Obviously
what we really need is a new nmbd in Samba4.
(This used to be commit a30be712e5abe81b57f8b1b75ebf152018df0eea)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
4a8b3041aa r4453: use lp_server_role(), which currently returns 3, for the dssetup
role. The value '5', which is what my w2k3 DC returns, doesn't
work. I'm not sure why this is.

with this change the GUI ACL editor from w2k3 works properly, with
either server role in the HKLM registry.
(This used to be commit 27a8b270bdd029a850c5ec3d10c1ac42468169cb)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
09d708e27e r4452: the beginnings of a dssetup rpc server.
(This used to be commit 1c2170ae21d60c22ee3053fbf249dba59de576ba)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
dda32aa5ba r4451: added initial RPC-DSSETUP torture test. It works for level1 of
ds_RolerGetPrimaryDomainInformation()
(This used to be commit 7aec3dac6fd5165cfca5c650aaa29234e278d95d)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
4ad7acbbee r4450: the beginnings of IDL for the dssetup pipe. I need this pipe for ACL editing from w2k3
when we present ourselves as a DC in the registry
(This used to be commit 9651901791e0553f106ab957c5787c109098248b)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
502490b467 r4449: fixed the helpstring for LSA IDL
(This used to be commit 40a68a160e43b2e5d018e393ddecdfc50bad5360)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
291b02a639 r4448: - fixed access_mask checking on acl set
- honor the change ownership requests of acl set, changing the underlying
  unix owner/group

- fix the access mask on file create with SEC_FLAG_MAXIMUM_ALLOWED
(This used to be commit 5761fa35ab727b51ef1b52459911bafbdd788755)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
90a322f6d7 r4447: implement server side of lsa_LookupSids3() and lsa_LookupNames3()
(This used to be commit e535f84504b07a912c2f5dd6eca4c9893c1843db)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
75ccd299cd r4446: attempt to fix the build - andrew, can you check I've done this right?
(This used to be commit 9f0bf657aeee86d859742fb4da3a0f806e7060b6)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
13f47df8cd r4445: put the unlink test in a subdirectory, and ensure it cleans up
(This used to be commit 382231ca365eccec8024af9420b1ebe41953bdb5)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
f1938123a6 r4444: - initialise registry:HKEY_LOCAL_MACHINE to a reasonable default (where
provision.pl suggests hklm.ldb be put)

- fix the globals init not to wipe parametic values after initialising
  them (this bug prevented default values for parametric parameters)
(This used to be commit 6a360c52c1723b4c3485a97ebcfeb907f840a051)
2007-10-10 13:07:51 -05:00
Andrew Tridgell
fc26c0c077 r4443: test lsa_LookupNames3() even when lsa_LookupSids3() fails
(This used to be commit d37f556258ba12479e4e9acc5cdb5535ebf41d7f)
2007-10-10 13:07:50 -05:00
Andrew Tridgell
6c8df6db8f r4442: fix lsa_TranslatedSid3 (its a dom_sid2 not a dom_sid)
(This used to be commit 0dd258709554265efaa0d25ad5bc86b559139c2e)
2007-10-10 13:07:50 -05:00
Andrew Bartlett
e6365b8950 r4441: gensec_krb5 update:
- Use more of the clikrb5.c wrapper calls

 - Don't use the session keytab if we kinit for the user.

Andrew Bartlett
(This used to be commit e15dbee00628475d5e1c1f329a7f9b199bc36360)
2007-10-10 13:07:50 -05:00
Stefan Metzmacher
85b492bb5b r4440: - add a start of srvsvc_NetShareCheck() server code
- filterout hidden shares in NetShareEnum()

- get max_connections right

metze
(This used to be commit c685823c5d75f22177549566866301523a64a1dd)
2007-10-10 13:07:50 -05:00
Stefan Metzmacher
f53293ffbf r4439: unlimited connections is -1
metze
(This used to be commit e62b36bef193f6a58ee035d581ef0f574f1e2910)
2007-10-10 13:07:50 -05:00
Stefan Metzmacher
2acf961638 r4438: the ADMIN$ share is a diskshare but hidden
metze
(This used to be commit 33a185ec3b211f6137abd6367ccc81d5102e5f4f)
2007-10-10 13:07:50 -05:00
Andrew Tridgell
835d231cee r4437: added IDL and test code for lsa_LookupSids3() and lsa_LookupNames3().
For some reason I am getting ACCESS_DENIED from w2k3 on
lsa_LookupSids3(). I will investigate.
(This used to be commit c759fa0000e37c3e93a7529a7701998af6727612)
2007-10-10 13:07:50 -05:00
Stefan Metzmacher
6b59b37744 r4436: add one more flag
metze
(This used to be commit 7886000e031622795fecb6ec37990c133b1e66f7)
2007-10-10 13:07:49 -05:00
Stefan Metzmacher
7ac62a7b13 r4435: add another error code
metze
(This used to be commit 02861f63052c48fc85c6694ad8164cc6cc5443d4)
2007-10-10 13:07:49 -05:00
Stefan Metzmacher
ccbfe7b61d r4434: - fix some NetShare* idl functions
- add torture test for NetShareCheck()

metze
(This used to be commit 96000a2261ed56fda613a45e3aa460eb3c87082a)
2007-10-10 13:07:49 -05:00
Andrew Tridgell
e046e9dd73 r4433: added the boilerplate for the new w2k3 LSA functions in preparation
for adding LookupSids3 (needed for ACL editing from w2k3)
(This used to be commit 745bbc0e1717c1e0068be00cff36071dbdc451a6)
2007-10-10 13:07:49 -05:00
Stefan Metzmacher
d63c481fb9 r4432: - add srvsvc_NetShareInfo level 1006 and 1501 idl
- implement srvsvc_NetGetShareInfo()

- add more error checks

- bring the rest of the code in the same layout

metze
(This used to be commit 0dd14d9fc611a33dad4e559321d6c50d82efb5d1)
2007-10-10 13:07:49 -05:00
Stefan Metzmacher
cb25806d8d r4431: add WERR_NET_NAME_NOT_FOUND
metze
(This used to be commit 74e65680fa9a6b8f04c6ae62ec1da49659879fb5)
2007-10-10 13:07:48 -05:00
Andrew Tridgell
e0a40dec09 r4430: - fixed the BASE-LOCK* tests to use a subdirectory, and properly setup the directory before each test,
thus avoiding errors due to previous failures
(This used to be commit a44fa5319d87e57f4b904334d9ea65cc6807b789)
2007-10-10 13:07:48 -05:00
Andrew Tridgell
a696713b43 r4429: the owner of a file always gets SEC_STD_DELETE
(This used to be commit 81630d3014c8cbd970bc917e3e9aef337fa211cd)
2007-10-10 13:07:48 -05:00
Andrew Tridgell
e222a342de r4428: use minimum open permissions in the 'acl' command in smbclient, so the user is
not prevented from viewing the acl by other access bits
(This used to be commit 61e71782f573d0fa5b88237299df516c67405e30)
2007-10-10 13:07:48 -05:00
Andrew Tridgell
09c1b9cbe5 r4427: - added ldb_msg_*() functions for sorting, comparing and copying messages
- added a ldb_msg_canonicalize() function that fixes a record to not have any duplicate
  elements

- changed ldbedit to use ldb_msg_canonicalize(). This fixes a bug when you rename multiple
  elements in a record in one edit
(This used to be commit f006e724400843419c8b6155cbeae1876983855e)
2007-10-10 13:07:48 -05:00
Stefan Metzmacher
72ffef2406 r4426: fix same names
metze
(This used to be commit 18bbe40fe1e400546ff3750213f6c0505895e357)
2007-10-10 13:07:48 -05:00
Stefan Metzmacher
09ee8ae1de r4425: - move srvsvc and wkssvc server code to the new W_ERROR_HAVE_NO_MEMORY() macro
- add parameters for
  server_info:platform_id = 500 /* this is PLATFORM_ID_NT */
  server_info:version_major = 5
  server_info:version_minor = 2

- implmented srvsvc_NetSrvGetInfo level 101

- make dcesrv_common_get_server_name() match w2k3

metze
(This used to be commit 16f43207704397c6e3c0132e9f17c8a1a846ddca)
2007-10-10 13:07:48 -05:00
Andrew Tridgell
c5fa6f7516 r4424: fixed a simple bug in the '|' handling in indexed ldb searches. I'm
amazed we got along for so long with this bug!
(This used to be commit 937159cf2c6ae08808bd10946fcdbd8741e1a560)
2007-10-10 13:07:47 -05:00
Stefan Metzmacher
0128bd6d3f r4423: give lp_parm_int() and lp_parm_ulong() default values
metze
(This used to be commit c44f4d44b51789916e50c9da93046d0a15245edc)
2007-10-10 13:07:47 -05:00
Stefan Metzmacher
00c7f9eed8 r4422: make lp_set_cmdline("torture:dangerous", "Yes") a bool parameter
metze
(This used to be commit 19482a2245abbf9154423ca8997957b56333fba2)
2007-10-10 13:07:47 -05:00
Stefan Metzmacher
c4e152850d r4421: fix typo
metze
(This used to be commit 222abd4171ce69c65a13b52675d4d75009056bca)
2007-10-10 13:07:47 -05:00
Stefan Metzmacher
2c34148db5 r4420: - add usefull helper macros for allocation failures,
they should be used in mostly all our code after
  calling a talloc_* function

- the current NTSTATUS_TALLOC_CHECK() and WERR_TALLOC_CHECK()
  should be replaced by this new macros

metze
(This used to be commit b6376590f4b2409b2237809d378d9425fe1ce07e)
2007-10-10 13:07:47 -05:00
Stefan Metzmacher
b5b1c52a98 r4419: move security_token stuff to the libcli/security/
and debug privileges

metze
(This used to be commit c981808ed4cfa63c7ba7c4f9190b6b14f74bab40)
2007-10-10 13:07:47 -05:00
Stefan Metzmacher
25715e32f0 r4418: fix compiler warning and remove unused typedef
metze
(This used to be commit 5861657fd12aae026c06ab8c6ae1f1656d06d0a1)
2007-10-10 13:07:47 -05:00
Volker Lendecke
6372b4e4a4 r4417: Reply to samr_QueryDomainInfo with the same static value as level2 does.
Volker
(This used to be commit 04cf580ef30ac38f3f312184a7b18551195a17ce)
2007-10-10 13:07:46 -05:00
Volker Lendecke
6f2e88a09c r4416: [in,out] variables do have an r->out component...
Volker
(This used to be commit 97247c902962b7c0ac69691ae8d7300321de41d5)
2007-10-10 13:07:46 -05:00
Volker Lendecke
6aaefee85f r4415: Implement samr_RemoveMemberFromForeignDomain. This is needed to delete a user
with usrmgr.exe.

To fix: Remove domain group membership attrib values when a user is deleted.

Volker
(This used to be commit 83d180c732ba73cf50072ef73ccdd60e72bc9910)
2007-10-10 13:07:46 -05:00
Volker Lendecke
8da7a60557 r4414: Various bits&pieces:
* Implement samr_search_domain, filter out all elements with no "objectSid"
  attribute and all objects outside a specified domain sid.

* Minor cleanups in dcerpc_samr.c due to that.

* Implement srvsvc_NetSrvGetInfo level 100. A quick hack to get usrmgr.exe
  one step further.

* Same for samr_info_DomInfo1.

Volker
(This used to be commit cdec89611355fb75d253ecf5b658d0e23de8e440)
2007-10-10 13:07:46 -05:00
Andrew Tridgell
3450ed666c r4413: login failure doesn't warrant a level 1 debug (its filling my logs during torture tests)
(This used to be commit b9284c16dc37bf14fceeaa694e82f36a38b0dd93)
2007-10-10 13:07:45 -05:00
Andrew Tridgell
ef179fddb3 r4412: SEC_FILE_READ_ATTRIBUTE is always granted, even if not requested. This was being done
in the full ACL code, but not in the unix access check code, which meant that qfileinfo
was failing for some parameters
(This used to be commit 96d017e521f5a996a7a274682838855d077834bc)
2007-10-10 13:07:45 -05:00
Andrew Tridgell
373bca5bcd r4411: when checking for create permissions, we need to check the parent, not the child!
(This used to be commit 30b4c20b1c9aea94dd2a0611b58860797d244e5a)
2007-10-10 13:07:45 -05:00
Andrew Tridgell
4f16988ead r4410: pvfs_rename_one() should not check for create permissions, as the rename
is always in the same directory
(This used to be commit babf3480a4c29ce28d9a4525c4174a3d765dcbab)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
91190fdad8 r4409: fixed handling of zero access masks for the POSITION_INFORMATION query/set levels
(This used to be commit 75e7229476e1af6ab78fa5b41a7bb67df8e3d2dd)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
e913a48ded r4408: added the remaining access check hooks into pvfs. All calls should now have acl checking,
and obey the various inheritance rules.
(This used to be commit 5fe51807d6b97e68b65f152c0f405e5c5a025d21)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
447a346f0d r4407: stricter checking of parameters on hard link creation in the RAW-RENAME test
(This used to be commit b239589b00e673ae2d6254083cd324bc3b54bcdf)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
1c092c5ba6 r4406: - don't call the xattr unlink hook on unlink unless the link count is 1, otherwise
the xattrs of the remaining link are removed

- fix the handling of attribute set on directories
(This used to be commit fa44e3cce00b75656c85378c7825960540d2f282)
2007-10-10 13:07:44 -05:00
Andrew Tridgell
1e4a4c4d6e r4405: added acl inheritance to the mkdir and t2mkdir backends.
(This used to be commit b44d4d17df8af4941740e5d5e0842ca01d8f403c)
2007-10-10 13:07:44 -05:00