1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Commit Graph

2911 Commits

Author SHA1 Message Date
Stefan Metzmacher
64b516b105 r4045: readd krb5 support defaulted to disable
use:
gensec:krb5=yes
gensec:ms_krb5=yes

to enable it

or -k on the client tools on the command line

metze
(This used to be commit 0ae5794cf4)
2007-10-10 13:06:17 -05:00
Stefan Metzmacher
00948a8072 r4044: only send supportedMech when we also send other data
metze
(This used to be commit 1e0483a848)
2007-10-10 13:06:17 -05:00
Stefan Metzmacher
4299e989c0 r4042: fix segfault on server schannel connections
metze
(This used to be commit 57bd26f9c5)
2007-10-10 13:06:17 -05:00
Stefan Metzmacher
b71458c742 r4041: fix cut-n-paste typo
metze
(This used to be commit 54398aa889)
2007-10-10 13:06:17 -05:00
Stefan Metzmacher
785e7eb452 r4040: sorry today is not my day...
uint32 != uint8_t ...

metze
(This used to be commit a8a3b8ee34)
2007-10-10 13:06:17 -05:00
Andrew Tridgell
4754082fea r4039: added a test for an element > 128 bytes in length, to ensure we test
for sign extending errors in element length
(This used to be commit 07378fca6c)
2007-10-10 13:06:17 -05:00
Stefan Metzmacher
7ea3540763 r4038: fix sign/unsign bug I introduced in -r 4022
this caused new ldb record to be corrupt if the length was > 12b byte

thanks tridge for finding this

metze
(This used to be commit 6998c37b47)
2007-10-10 13:06:16 -05:00
Andrew Tridgell
4183b2ac38 r4037: fixed a bunch of "might be uninitialised" warnings after enabling -O1 in my compile
(This used to be commit 0928b1f5b6)
2007-10-10 13:06:16 -05:00
Andrew Tridgell
3b863542dc r4036: expanded the RAW-ACLS torture test to include tests for the
generic->specific access mask mappings, and tests of the behaviour of
SID_CREATOR_OWNER and SEC_FLAG_MAXIMUM_ALLOWED
(This used to be commit f572fe6d29)
2007-10-10 13:06:16 -05:00
Andrew Tridgell
cc8f4358cc r4035: more effort on consistent naming of the access mask bits.
This removes the duplicate named SEC_RIGHTS_MAXIMUM_ALLOWED and
SEC_RIGHTS_FULL_CONTROL, which are just other names for
SEC_FLAG_MAXIMUM_ALLOWED and SEC_RIGHTS_FILE_ALL. The latter names
match the new naming conventions in security.idl

Also added names for the generic->specific mappings for files are
directories
(This used to be commit 17a4e0b3ac)
2007-10-10 13:06:16 -05:00
Andrew Tridgell
81476cd9fa r4034: add a function security_descriptor_create() which can be used to
easily create complex security descriptors for testing. This greatly
simplifies the smbtorture code I am writing for testing our
new access_check code.
(This used to be commit 891a8bc16a)
2007-10-10 13:06:16 -05:00
Andrew Tridgell
450368c833 r4033: removed a pointless comment
(This used to be commit 1f3f9f8294)
2007-10-10 13:06:16 -05:00
Stefan Metzmacher
34b1367373 r4027: add a useful function for debugging
metze
(This used to be commit 41b1ba53fc)
2007-10-10 13:06:15 -05:00
Andrew Tridgell
a8a3fec528 r4026: added NT ACL checking on pvfs_open() for existing files. I need to
work out some way to do a decent test suite for this.
(This used to be commit 9a9a0d0e79)
2007-10-10 13:06:15 -05:00
Andrew Tridgell
1a7283a8fa r4025: added a sec_access_check() function for checking security descriptors
against a users security token and access_mask
(This used to be commit c4d21cd4b1)
2007-10-10 13:06:15 -05:00
Stefan Metzmacher
b6c4b63dc5 r4022: fix compiler warnings
metze
(This used to be commit 79d0eb2f67)
2007-10-10 13:06:15 -05:00
Andrew Tridgell
75f58e2d0f r4015: correct copyright attributions
(This used to be commit 078d9ab05b)
2007-10-10 13:06:15 -05:00
Andrew Tridgell
bb291f184e r4014: removed unused MacExtension.h header
(This used to be commit 5ffffdd79f)
2007-10-10 13:06:15 -05:00
Andrew Tridgell
607e302238 r4013: got rid of a bunch of unused or unmaintained code
- removed the clitar code. It is unmaintained, and a horribly badly done hack

 - removed client.h as it contained mostly unused definitions

 - removed the unused clidfs.c code
(This used to be commit 31a7bddbb3)
2007-10-10 13:06:15 -05:00
Andrew Tridgell
c33283df20 r4012: split out the lsa lookup single name logic into a separate function
(This used to be commit 44d9761962)
2007-10-10 13:06:14 -05:00
Andrew Tridgell
fdc9f417d8 r4011: get rid of rpc_secdes.h and replace it with a single sane set of
definitions for security access masks, in security.idl

The previous definitions were inconsistently named, and contained many
duplicate and misleading entries. I kept finding myself tripping up
while using them.
(This used to be commit 01c0fa722f)
2007-10-10 13:06:13 -05:00
Andrew Tridgell
2ed4ff13d5 r4010: fixed parsing of null attributes in the ldb ldif parser
(This used to be commit b4fd76f78e)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
5ef59e9a0a r4003: run successful against a nt4 sp6 pdc with one nt4 sp6 trust and a w2k3 trust
metze
(This used to be commit 5101cd51a2)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
b7781099e6 r4002: NT 4.0 sp6a can't do schannel 128
metze
(This used to be commit c04a77ed69)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
692e1a214c r4001: fix segfault fix auth failed
metze
(This used to be commit 6a7eee1d99)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
15543f18ac r4000: DATA_BLOB.data is uint8_t * not void * :-)
(thanks abartlet for telling me)

metze
(This used to be commit 2783bf393f)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
114b43a167 r3999: - reply with the same DsBindInfo blob as w2k3 in the server function
- add idl for drsuapi_DsReplicaSync() not yet complete

- just return WERR_OK for the drsuapi_DsReplicaSync() server function

metze
(This used to be commit e896925ac0)
2007-10-10 13:06:12 -05:00
Stefan Metzmacher
ee0d68dc30 r3998: allow const arrays (see next commit to drsuapi.idl)
metze
(This used to be commit 7264a2227d)
2007-10-10 13:06:12 -05:00
Stefan Metzmacher
3558d8b40d r3997: fix STR_CHARLEN pull case
metze
(This used to be commit 623411f74e)
2007-10-10 13:06:12 -05:00
Stefan Metzmacher
29053605a7 r3996: add some comments
metze
(This used to be commit 87a92d3d5c)
2007-10-10 13:06:12 -05:00
Andrew Tridgell
77be33e31c r3995: improved the default ACL mapping from unix perms
(This used to be commit 01e89697fe)
2007-10-10 13:06:12 -05:00
Andrew Tridgell
f11aa23296 r3994: - removed the unused reference count code in lsa server
- fixed the sid_index field in lsa LookupSids and LookupNames
(This used to be commit 677f701e71)
2007-10-10 13:06:12 -05:00
Andrew Tridgell
96f4d98153 r3993: use distinctive fnums in the ipc backend, to make monitoring sniffs easier
(This used to be commit 54209ed056)
2007-10-10 13:06:12 -05:00
Andrew Tridgell
b393de7f05 r3992: provide hooks for lsa to lookup sids allocated using the linear id->sid mapping
(This used to be commit e611405109)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
7da22310e7 r3991: for uid->sid and gid->sid to be efficient we need to index on unixID
and unixName in samdb.
(This used to be commit 5c966821e2)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
71a81e9dcb r3990: take advantage of the uid->sid and gid->sid code to create a much
better default NT ACL in pvfs
(This used to be commit 9ff6ecbdb6)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
8b4c1f448c r3989: added a linear algorithmic mapping for uid->sid and gid->sid within
our local domain. Note that this linear mapping does not suffer from
the "foreign sid" problems of the linear mappings we have previously
rejected for the sid->uid problem.

the mapping allows for 1 billion automatically allocated users or
groups for the local domain.
(This used to be commit 8f57343975)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
3342a53c0f r3988: made dom_sid_add_rid() allocate the new sid with proper parent/child talloc
relationship
(This used to be commit 5db0eb1fe3)
2007-10-10 13:06:11 -05:00
Stefan Metzmacher
05def77d80 r3984: success full parse the repsFrom/repsTo LDAP fields
metze
(This used to be commit 56c66f4a09)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
dc0e4975d6 r3983: posix:fakeoplocks should default to False, not True !
(This used to be commit 052d91c59f)
2007-10-10 13:06:11 -05:00
Andrew Tridgell
6895228b5c r3982: split out the sid -> uid/gid mapping routines into a ntvfs_sidmap
subsystem. This is in preparation for adding better default ACL
generation in pvfs, which will require uid/gid -> sid mapping.
(This used to be commit b31108e492)
2007-10-10 13:06:11 -05:00
Günther Deschner
e1d7b15868 r3981: Use correct access-mask when querying aliases.
Guenther
(This used to be commit 5dde59be09)
2007-10-10 13:06:10 -05:00
Andrew Tridgell
56ea10795c r3980: added server side support for lsa_LookupNames() and lsa_LookupNames2()
(This used to be commit da12780bd9)
2007-10-10 13:06:10 -05:00
Andrew Tridgell
20c0900edb r3979: added server side code for lsa_LookupSids2() and fixed authority_name
return code to include our own domain.

editing of ACLs via the w2k3 GUI works nicely (and faster) with these changes
(This used to be commit a3f7f34b39)
2007-10-10 13:06:10 -05:00
Andrew Tridgell
b56d1c5cb7 r3978: added IDL and test code for lsa_LookupSids2() and lsa_LookupNames2()
(This used to be commit 9da455ed56)
2007-10-10 13:06:10 -05:00
Andrew Tridgell
990acc9f77 r3977: fixed the lmPwdHash change in the rpc server (we were not fetching the
lm hash from the samdb, and thus not checking the verifier)

fixed the client side to calculate the lm verifier based on the nt
hash, not the lm hash (confirmed using w2k3)
(This used to be commit 27e7fb3baf)
2007-10-10 13:06:10 -05:00
Andrew Tridgell
b6b0106427 r3976: changed NBENCH to use the same recording method as the latest dbench,
where the warmup phase continues until all clients have done some file
IO. This gives more repeatable results when under high load
(This used to be commit aca0658f6d)
2007-10-10 13:06:10 -05:00
Andrew Tridgell
d019557a53 r3975: added LFN filesystem attribute bit definition from ethereal
apologies for not committing this earlier
(This used to be commit 0950681091)
2007-10-10 13:06:10 -05:00
Stefan Metzmacher
e900618654 r3972: use GUID_* naming context and move GUID_* functions to one place
metze
(This used to be commit 523e6acf4f)
2007-10-10 13:06:09 -05:00
Stefan Metzmacher
3308087bae r3971: fix compiler warnings
metze
(This used to be commit 234166606d)
2007-10-10 13:06:09 -05:00