1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00

1856 Commits

Author SHA1 Message Date
Nadezhda Ivanova
6283f2caaa Initial implementation of security descriptor creation in DS
TODO's:
ACE sorting and clarifying the inheritance of object specific ace's.
2009-09-20 15:16:17 -07:00
Andrew Tridgell
92786aebf1 s4-resolve: fixed a crash bug on timeout
We were creating the name resolution context as a child of lp_ctx,
which meant when we gave up on a connection the timer on name
resolution kept running, and when it timed out the callback crashed as
the socket was already removed.
2009-09-19 08:23:03 -07:00
Matthieu Patou
aadf5e3910 pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.
Fix bug #6723
2009-09-17 19:36:32 +02:00
Nadezhda Ivanova
d70e171719 Owner and group defaulting.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-09-16 07:52:05 -07:00
Andrew Tridgell
7ded0741d9 s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
This will be used as a simple way to lock down DRS replication to
administrators and domain controllers
2009-09-15 19:25:45 -07:00
Andrew Bartlett
668470c992 libcli:nbt make the lmhosts parsing code and dependicies common
This starts the process to have Samba4 use lmhosts.

Andrew Bartlett
2009-09-15 07:42:54 -07:00
Andrew Tridgell
294e7cd566 s4/libcli: when we get a DNS lookup failure show the name
When tracking down complex connection problems its useful knowing what
name lookups failed.
2009-09-11 14:07:18 +10:00
Andrew Bartlett
7496095c1b s4:libcli/ldap Explain why we set a hostname for ldapi:// connections
It is a pretty odd thing to do, and it's only because of the
restrictions of DIGEST-MD5 in Cyrus SASL that we do it.

Andrew Bartlett
2009-08-17 11:08:42 +10:00
Stefan Metzmacher
1d75a6e224 libcli/smb: move smb2_create_blob code to libcli/smb/
I want to use this in source3/smbd/

metze
2009-08-12 19:22:06 +02:00
Stefan Metzmacher
1df883aa39 libcli: move some common SMB and SMB2 stuff into libcli/smb/
This will hold code that's shared between source3 and source4.

metze
2009-08-12 18:28:32 +02:00
Stefan Metzmacher
aef96af916 s4:libcli/smb2: move SMB2_GETINFO_* flags into smb2_constants.h
metze
2009-08-07 14:56:23 +02:00
Stefan Metzmacher
acbb9da530 s4:libcli/smb2: remove unused and redundant SMB2 security flags
metze
2009-08-07 14:56:23 +02:00
Stefan Metzmacher
c2c4d489b6 s4:libcli: move SMB2 Find constants to smb2_constants.h
metze
2009-08-07 14:56:22 +02:00
Stefan Metzmacher
21d6f276fb s4:libcli/raw: we don't need to include "smb.h" explicit
metze
2009-08-07 14:56:22 +02:00
Stefan Metzmacher
93ec5d27e4 s4:libcli/raw: also include smb2_constants.h into interfaces.h
metze
2009-08-07 14:56:21 +02:00
Andrew Tridgell
e2d4ae1510 fixed several places that unnecessarily take a reference to the event context
These references were triggering the ambiguous talloc_free errors from
the recent talloc changes when the server is run using the 'standard'
process model instead of the 'single' process model. I am aiming to
move the build farm to use the 'standard' process model soon, as part
of an effort to make our test environment better match the real
deployment of Samba4.

The references are not needed as the way that the event context is
used is as the 'top parent', so when the event context is freed then
all of the structures that were taking a reference to the event
context were actually freed as well, thus making the references
redundent.
2009-08-07 17:24:48 +10:00
Andrew Tridgell
ddd13c6816 handle large directories in smb2_deltree() 2009-08-05 15:05:13 +10:00
Matthias Dieter Wallnöfer
a08bffa358 Adds new error codes (needed for enhancing error messages for SAMBA 4 AD LDAP server) 2009-07-31 17:40:46 +02:00
Stefan Metzmacher
a3bcbd1775 s4:libcli/ldap: the tls code steals the original socket on its own now
metze
2009-07-31 14:42:05 +02:00
Stefan Metzmacher
c4274e3480 s4:libcli/ldap: add support for new Recycle Bin Feature LDAP Controls
LDAP_SERVER_SHOW_RECYCLED_OID         1.2.840.113556.1.4.2064
LDAP_SERVER_SHOW_DEACTIVATED_LINK_OID 1.2.840.113556.1.4.2065

metze
2009-07-23 18:04:31 +02:00
Matthias Dieter Wallnöfer
295c3724a3 Fix typo 2009-07-19 16:00:14 +02:00
Stefan Metzmacher
da737f2447 s4:libcli/smb2: add smb2_transport_credits_set_charge() to change the CreditsCharge value for the next request
metze
2009-07-15 10:57:32 +02:00
Stefan Metzmacher
c281638bc4 s4:libcli: move SMB2 lock flags to smb2_constants.h
metze
2009-07-02 22:25:49 +02:00
Andrew Tridgell
ddce3b5ac8 two more NT status codes that we get on DRS with w2k8-R2 2009-06-12 12:23:46 +10:00
Andrew Bartlett
9b261c008a s4:heimdal: import lorikeet-heimdal-200906080040 (commit 904d0124b46eed7a8ad6e5b73e892ff34b6865ba)
Also including the supporting changes required to pass make test

A number of heimdal functions and constants have changed since we last
imported a tree (for the better, but inconvenient for us).

Andrew Bartlett
2009-06-12 07:45:48 +10:00
Andrew Tridgell
a5003de56b fixed the encoding/decoding of the reverse attribute for server side sort 2009-06-10 11:45:53 +10:00
Sam Liddicott
ebf5523b6e s4: smbcli_transport_send hit the socket right away if possible
[Metze; "make test" on git master outputs exactly the same test summary
with our without this patch (apart from the "using seed" lines)]

If the transport socket is writable, then push the queue along
rather than wait until the caller returns back to the tevent loop.

This strategy keeps the sockets piping hot, and is particularly good
for cases where reading requests from one socket causes lots of
writes on another socket, or where lots of writes are made in a batch.

It doesn't matter if the socket is not writeable yet, packet_queue_run
will return quite cheaply in such a case.

Signed-off-by: Sam Liddicott <sam@liddicott.com>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-06-09 18:51:31 +02:00
Stefan Metzmacher
d153430e32 s4:libcli/smb2: add smb2_transport_credits_ask_num()
metze
2009-06-09 16:49:30 +02:00
Stefan Metzmacher
5b99fa5c4f s4:libcli/smb2: only add the 1 byte dynamic buffer padding for non compounded requests
metze
2009-06-09 16:49:30 +02:00
Stefan Metzmacher
d777879aaa s4:libcli/smb2: add support sending compounded requests
metze
2009-06-09 16:49:29 +02:00
Stefan Metzmacher
81275c84d3 s4:libcli/smb2: prepare SMB2 signing code for compounded requests
metze
2009-06-09 16:49:29 +02:00
Kai Blin
57ea909b32 libwbclient: Add async call framework. 2009-05-30 09:17:37 +02:00
Andrew Kroeger
554923ce1b s4: Add additional 2-letter SID/RID mappings.
Information from http://msdn.microsoft.com/en-us/library/aa379602(VS.85).aspx
2009-05-29 12:37:26 +10:00
Stefan Metzmacher
53df343644 s4:libcli/smb2: remove old dialect revision constants
metze
2009-05-26 09:50:50 +02:00
Stefan Metzmacher
01b05df766 s4:libcli/smb2: use new SMB2_DIVELECT_REVISION constants
Also send them in the order a windows client would
send them (the lowest first).

metze
2009-05-26 09:50:43 +02:00
Stefan Metzmacher
d0051462b9 s4:libcli/smb2: add some more SMB2 constants
metze
2009-05-26 09:39:25 +02:00
Stefan Metzmacher
04ceabf56f s4:libcli/smb2: fix session setup with raw NTLMSSP
metze
2009-05-20 19:58:37 +02:00
Stefan Metzmacher
540b713075 s4:libcli/smb2: use raw ntlmssp if the server didn't provide a sec blob
metze
2009-05-20 19:58:37 +02:00
Stefan Metzmacher
5b55e47b71 s4:libcli/smb2: fill in transport->negotiate.secblob with the correct data
metze
2009-05-20 19:58:36 +02:00
Günther Deschner
9a13af9a99 s4: try to fix privileges implementation in order to pass the RPC-SAMR-USERS-PRIVILEGES test.
Guenther
2009-05-20 13:35:05 +02:00
Stefan Metzmacher
ac7f4fa380 s4:libcli/raw: initialy read the first 4 bytes only
metze
2009-05-20 10:16:42 +02:00
Jelmer Vernooij
88876ac571 errormap: Remove wbc -> NTSTATUS error map for now. It is not used.
This was breaking the Samba 4 installation since it added dependencies
on header files we weren't installing.

Confirmed with Kai.
2009-05-15 16:05:37 +02:00
Volker Lendecke
993bdd87b5 Move SMB2 constants to a separate file 2009-05-11 15:54:24 +02:00
Volker Lendecke
ce8f3528f1 Fix SMB2_CAP_DFS 2009-05-11 15:54:24 +02:00
Stefan Metzmacher
5604e8d614 s4:libcli: remember operating system and lan manager strings from session setup
metze
2009-05-01 15:46:08 +02:00
Stefan Metzmacher
b97a591e2c s4:libcli/raw: write can return STATUS_BUFFER_OVERFLOW as a real error
We should not try to parse the result if the status is not NT_STATUS_OK.

metze
2009-05-01 15:12:07 +02:00
nadezhda ivanova
90cc5e72ba Fix of a bug in the security.descriptor.as_sddl() method
security.descriptor.as_sddl() method did not work correctly when invoked without
supplying the domain sid. Returned the same value as when the sid was provided.
Test added for this case in  libcli/security/tests/bindings.py

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2009-04-23 18:21:25 +02:00
Kai Blin
c93e2d9d43 errormap: Change the WBC_ERR_UNKNOWN_ERROR to map to NT_STATUS_UNSUCCESSFUL
This allows us to distinguish on NTSTATUS level if we got a
WBC_ERR_UNKNOWN_ERROR or WBC_ERR_NSS_ERROR.
2009-04-23 00:23:56 +02:00
Kai Blin
7a9be21916 errormap: Add wbcErr to NTSTATUS mappings 2009-04-22 00:14:45 +02:00
Björn Jacke
42e3ae6550 libcli: fix a "not handled in switch" compile warning
return NULL also for RAW_CLOSE_GENERIC
2009-04-22 00:03:22 +02:00