1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-17 02:05:21 +03:00

17323 Commits

Author SHA1 Message Date
Gerald Carter
62e7cc7c3b r5205: more fixups for BUG 2291 2007-10-10 10:55:33 -05:00
Gerald Carter
5ec1faa2ad r5203: additional changes for BUG 2291 to restrict who can join a BDC and add domain trusts 2007-10-10 10:55:32 -05:00
Gerald Carter
c3edeba62d r5192: missed one packaging fix for BUG 2299 2007-10-10 10:55:32 -05:00
Gerald Carter
d9d5634821 r5191: BUG 2299: better logrotate configuration from Levente Farkas <lfarkas@lfarkas.org> 2007-10-10 10:55:32 -05:00
Jeremy Allison
c43bae306a r5183: Ensure we correctly set the per-connection "case_sensitive" setting.
Rename dptrs_open to the more correct dirhandles_open.
Remove old #if 1.
Jeremy.
2007-10-10 10:55:32 -05:00
Günther Deschner
5ca0d1b87c r5180: Call the "add machine script" to create all kinds of trust accounts
(this restores old behaviour). Fixes #2291.

Guenther
2007-10-10 10:55:32 -05:00
Deryck Hodge
c9cacd553f r5179: Add -P (password-menu-only) option to swat. Admins can allow users
to use swat to change their password without allowing them to see
the "View" and "Status" buttons.

deryck
2007-10-10 10:55:32 -05:00
Simo Sorce
1424612047 r5176: Warn the user that print command is ignored when using cups libraries 2007-10-10 10:55:32 -05:00
Gerald Carter
be537eaebe r5174: ensure that we consistently use the current_user_info.smb_name vs. smb_name when parsing smb.conf and reloading config files 2007-10-10 10:55:31 -05:00
Jeremy Allison
54ac409d4f r5166: From James Peach - remove minor C99-isms.
Jeremy.
2007-10-10 10:55:31 -05:00
Gerald Carter
6a6e4af46a r5165: BUG 2295: always use get_local_machine_name() rather than digging in the gloval variable 'local_machine' 2007-10-10 10:55:31 -05:00
Jim McDonough
d159a5013e r5163: Fix bugzilla 2062:
turn off broadcast for all 390 NICs.
2007-10-10 10:55:31 -05:00
Gerald Carter
0a1f9703a1 r5162: BUG 2264: remove shutdown and abortshurn commands from rpcclient since they are stable in 'net rpc' (to avoid fixing portability bugs) 2007-10-10 10:55:30 -05:00
Jeremy Allison
0b04dd9d0c r5160: First cut at refactoring of directory code to handle non-wildcard
directory match more efficiently. Passes RAW-SEARCH under valgrind but needs more
testing (which I'll do later today :-).
Jeremy.
2007-10-10 10:55:30 -05:00
Gerald Carter
d6c7de2408 r5159: BUG 2262: add support to detect *freebsd6* (same as *freebsd5* currently) 2007-10-10 10:55:30 -05:00
Gerald Carter
17239d609f r5158: BUG 2263: patch from Timur Bakeyev <timur@com.bat.ru> to guard base64_encode_data_blob() against empty blobs 2007-10-10 10:55:30 -05:00
Gerald Carter
314da60473 r5157: BUG 2266: conditionally include rpc/nettype.h to work around missing header onf FreeBSD4 2007-10-10 10:55:30 -05:00
Jeremy Allison
a38eeb765f r5154: Tidy up interface a little.
Jeremy.
2007-10-10 10:55:29 -05:00
Jeremy Allison
cfa8150fd9 r5152: Restructure the directory handling code, stop using void * pointers
that just allow the wrong pointer to be assigned :-) and make the
interface more consistent. Fix the FreeBSD directory problem. Last
thing to do is to add the "singleton" directory concept from James
Peach's code.
Jeremy.
2007-10-10 10:55:29 -05:00
Gerald Carter
5bd03d5926 r5150: consolidate the samr_make.*obj_sd() functions to share code 2007-10-10 10:55:29 -05:00
Gerald Carter
558525abf1 r5140: (a) fix problem with enumerating domain trusts in security = ads; (b) fix a segfault in rpcclient's dsenumdomtrusts 2007-10-10 10:55:29 -05:00
Gerald Carter
33ac88c6a7 r5132: netscape DS 5.2 schema update from Richard Renard <rrenard@idealx.com> 2007-10-10 10:55:29 -05:00
Gerald Carter
2ddcb64381 r5131: BUG 2290: don;t call mkversion.sh since we don't have it in this directory 2007-10-10 10:55:28 -05:00
Volker Lendecke
8c35c3bf2e r5127: Fix Bug 2289 -- thanks to jason@ncac.gwu.edu 2007-10-10 10:55:28 -05:00
Volker Lendecke
0c205bcc86 r5125: Fix bug 2113 -- thanks to jason@ncac.gwu.edu 2007-10-10 10:55:28 -05:00
Tim Potter
8e5db6f08c r5112: Fix for shared object creation in examples. Bugzilla #2058. 2007-10-10 10:55:15 -05:00
Tim Potter
3317482020 r5111: Fix up changed prototype for setsampwent pdb function. 2007-10-10 10:55:15 -05:00
Jeremy Allison
228d1e1649 r5100: We should only care about case-sensitivity when *reading* an incoming
filename, not returning one. Makes us pass one more Samba4 RAW-SEARCH test.
Jeremy.
2007-10-10 10:55:15 -05:00
Volker Lendecke
175ec3ed51 r5098: Next round build-fixing 2007-10-10 10:55:15 -05:00
Volker Lendecke
5f34139b68 r5096: Attempt to fix the build 2007-10-10 10:55:14 -05:00
Jeremy Allison
422fb43dda r5082: Don't blindly copy question rr_type and class, set correctly as required
by rfc1002.
Jeremy.
2007-10-10 10:55:14 -05:00
Jeremy Allison
86c5548d27 r5077: Use correct type for rr record on negative name query reply.
Jeremy.
2007-10-10 10:55:14 -05:00
Jeremy Allison
ab8c924004 r5076: Ensure that WINS negative name query responses and WACK packets
use the correct RR type of 0xA instead of reflecting back what
the query RR type was (0x20). See rfc1002 sections 4.2.14 and
4.2.16.
Jeremy.
2007-10-10 10:55:13 -05:00
Jeremy Allison
ef73dfe0d6 r5069: Ensure we return the correct errors for old-style search requests.
Jeremy.
2007-10-10 10:55:13 -05:00
Jeremy Allison
9d131e9419 r5066: A couple of small fixes from James Peach @ SGI.
Jeremy.
2007-10-10 10:55:13 -05:00
Jeremy Allison
0af1d2f6f2 r5063: Shamelessly steal the Samba4 logic (and some code :-) for directory
evaluation. This stops us from reading the entire directory into
memory at one go, and allows partial reads. It also keeps almost
the same interface to the OpenDir/ReadDir etc. code (sorry James :-).
Next I will optimise the findfirst with exact match code. This speeds
up our interactive response for large directories, but not when a
missing (ie. negative) findfirst is done.
Jeremy
2007-10-10 10:55:13 -05:00
Gerald Carter
e2ce048654 r5060: BUG 2286: fix typoe on sambaConfig oc definition 2007-10-10 10:55:13 -05:00
Günther Deschner
168ddf31d1 r5058: Due to the fragileness how windows reacts on unmapped sids sometimes,
don't leave administator-sid unmapped. Simply return "Administrator"

Guenther
2007-10-10 10:55:13 -05:00
Gerald Carter
c0e7f7ff60 r5056: * correct STANDARD_RIGHTS_WRITE_ACCESS bitmask define
* make sure to apply the rights_mask and not just the saved
  bits from the mask in access_check_samr_object()
* allow root to grant/revoke privileges (in addition to Domain
  Admins) as suggested by Volker.

Tested machine joins from XP, 2K, and NT4 with and without
pre-existing machine trust accounts.  Also tested basic file
operations using cmd.exe and explorer.exe after changing the
STANDARD_RIGHTS_WRITE_ACCESS bitmask.
2007-10-10 10:55:12 -05:00
Gerald Carter
17bc42b4c2 r5046: mark 'winbind enable local accounts' and testprns as depcrecated 2007-10-10 10:55:12 -05:00
Gerald Carter
d64fd1116d r5029: after talking to Rob, ensure that we set the NETIOSNAME.domainname
as the longname in the published printer information since this
is what we will have used when we joined the domain.

More testing on this tomorrow.
2007-10-10 10:55:12 -05:00
Gerald Carter
04030534ff r5028: * check acb_info mask in _samr_create_user instead of the last character
of the user name
* fix some access_mask checks in _samr_set_userinfo2 (getting join from
  XP without being a member of domain admins working)
2007-10-10 10:55:12 -05:00
Gerald Carter
c0e292e491 r5020: bumping the 3.0 tree to 3.0.12pre1 since there will not be a full sync for the 3.0.11rc1 release 2007-10-10 10:55:12 -05:00
Gerald Carter
f9f9e6039b r5015: (based on abartlet's original patch to restrict password changes)
* added SE_PRIV checks to access_check_samr_object() in order
  to deal with the run-time security descriptor and their
  interaction with user rights

* Reordered original patch in _samr_set_userinfo[2] to still
  allow root/administrative password changes for users and machines.
2007-10-10 10:55:12 -05:00
Jeremy Allison
05697fb502 r5014: Split out the request to send an async level II oplock break into a
new function to make it clear when it's called. Remove async parameter
that had been overloaded into request_oplock_break.
Inspired by work from Nadav Danieli <nadavd@exanet.com>.
Jeremy.
2007-10-10 10:55:11 -05:00
Gerald Carter
0ac3c4c5a2 r5012: fix segfault caused by using a ipp_t * after calling cupsDoRequest() 2007-10-10 10:55:11 -05:00
Jeremy Allison
47ed16aefb r5002: Ensure we can't remove a level II oplock without having the
shared memory area locked. This need to be in 3.0.11. Pointed
out by Nadav Danieli <nadavd@exanet.com>.
Jeremy.
2007-10-10 10:55:11 -05:00
Gerald Carter
41d247d964 r5000: 5000th post! w00tsvn diffsvn diff :-) 2007-10-10 10:55:11 -05:00
Gerald Carter
8946efe102 r4996: sync up copytights with trunk 2007-10-10 10:55:11 -05:00
Gerald Carter
1d7a636e0e r4995: fail set_privileges() if 'enable privileges = no' to prevent confused admins who never read what I write :-) 2007-10-10 10:55:11 -05:00