1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00

19277 Commits

Author SHA1 Message Date
Volker Lendecke
331041139f r22906: Some more message_send_pid
(This used to be commit 8abf9f396375b42d838e992b3a4e40e68e550ab2)
2007-10-10 12:22:06 -05:00
Volker Lendecke
63f9607ea7 r22905: cli_send_mailslot had a message_send_pid inside
(This used to be commit 3fdfb5b7cdf25f4db7bbacb416523d75cab1b103)
2007-10-10 12:22:06 -05:00
Günther Deschner
7c21a46afc r22904: Fix indent.
Guenther
(This used to be commit dcf5375aa4b2488dccd64c3bbee90183d244bc09)
2007-10-10 12:22:06 -05:00
Günther Deschner
4ff2e1eb8c r22903: Now that we have the on-disc trustdomaincache with type flags we can better
decide whether it's worth to register a krb5 ticket gain handler while users
logon offline.

Guenther
(This used to be commit 203391623b31bce71268c6e8fc955eab348e92f0)
2007-10-10 12:22:06 -05:00
Volker Lendecke
ab7a9d2bbe r22902: Add an event_context and a messaging_context to nmbd. Not used yet.
(This used to be commit 6d210fb8a13e93fe5b7bc160a343f74878dea727)
2007-10-10 12:22:06 -05:00
Günther Deschner
83a7d9558b r22901: When an AD account has UF_DONT_REQUIRE_PREAUTH set we need to fallback to ntlm
in the kerberized PAM_AUTH.

Guenther
(This used to be commit ef8f0d35040390f4bb49aab24ca4aad90ea47bc1)
2007-10-10 12:22:05 -05:00
Volker Lendecke
8f9369f2e6 r22900: Convert profile/ to messaging_send_pid/messaging_register
(This used to be commit edbeea520727f51568ccd8ffa802e06bd120794c)
2007-10-10 12:22:05 -05:00
Volker Lendecke
fb99bbe675 r22895: Convert some more calls from message_send_buf to messaging_send_buf
(This used to be commit c8b98273406242a89a7e5d1fb5d79120ebe5822a)
2007-10-10 12:22:05 -05:00
Michael Adam
2753d30cbe r22893: Use ldap_rename_s instead of deprecated ldap_rename2_s.
This fixes the build on solaris (host sun9).
And hopefully doesn't break any other builds... :-)
If it does, we need some configure magic.

Thanks to Björn Jacke <bj@sernet.de>.
(This used to be commit a43775ab36aa3d36108e1b5860bbee6c47e9b1b4)
2007-10-10 12:22:05 -05:00
James Peach
c0d467462f r22879: Tidy the build rules for targets that need the installation paths.
(This used to be commit c16ad8d58c05ed5c93dcb64880aec85ad4989263)
2007-10-10 12:22:05 -05:00
James Peach
9e2d1e8fe6 r22878: Warn in $PATH contains /usr/ucb. Bugzilla #4295.
(This used to be commit 947955a5e8f3e33e21d3a0633ed63be404c42b3c)
2007-10-10 12:22:05 -05:00
Jeremy Allison
338d2462d4 r22872: Add vfs_zfsacl module from Jiri Sasek <Jiri.Sasek@Sun.COM>.
Jeremy.
(This used to be commit bd80db71e71fc05b8b4875c386d8d58612cdbb06)
2007-10-10 12:22:04 -05:00
Lars Müller
642eb91261 r22870: Don't create shared objects of nss and tdb modules.
(This used to be commit 1c06148010cab8ed9742644cb11336abc31e8d8d)
2007-10-10 12:22:04 -05:00
Lars Müller
811d1f7abf r22869: Add bin/{ldap,nss,tdb}.@SHLIBEXT@ rules.
Not tested for SAMBA_3_0 as I didn't get autogen.sh or autoreconf to
build a configure.
(This used to be commit 6f19e5853da8a13698912dc8a19311920cadce63)
2007-10-10 12:22:04 -05:00
Volker Lendecke
fad7dd8a60 r22868: Replace some message_send_pid calls with messaging_send_pid calls. More
tomorrow.
(This used to be commit 74fa57ca5d7fa8eace72bbe948a08a0bca3cc4ca)
2007-10-10 12:22:04 -05:00
Alexander Bokovoy
1f073a0319 r22867: With Samba4's IDL, we now have two new flags for share types: STYPE_TEMPORARY and STYPE_HIDDEN
Strip them out when referencing share_type[] entries.

Apparently, some Windows XP installs create shares set to STYPE_HIDDEN by default, found by
Damir Shayhutdinov <damir@altlinux.org>. This also fixes smb4k crashes as it does call 'net share -l'.
(This used to be commit c3f4fdd37e62491a11d3993864ba51fdb596ea1b)
2007-10-10 12:22:04 -05:00
Michael Adam
1f7c3007b9 r22855: fix the build
(#if inside DEBUG macro not allowed...)

Michael
(This used to be commit f0570dc3d9e07475764e466901d4abfe939590f8)
2007-10-10 12:22:03 -05:00
Gerald Carter
d34f6bb969 r22852: merge fixes for CVE-2007-2446 and CVE-2007-2447 to all branches
(This used to be commit f65214be68c1a59d9598bfb9f3b19e71cc3fa07b)
2007-10-10 12:22:02 -05:00
Derrell Lipman
00790cb8af r22850: - Fixes bug 4601. smbc_getxattr() would not, in one case, properly return the
required size of a buffer needed to contain the extended attributes.
(This used to be commit 34f77af02e2073ccaabe1583011abeeabbbb24e1)
2007-10-10 12:22:02 -05:00
Michael Adam
c9b94d7170 r22848: Fix brace alignment.
(This used to be commit d909a6064159bc746bd558238e81d57cc274a162)
2007-10-10 12:22:02 -05:00
Michael Adam
c580cda23c r22847: The new validate_panic function calls exit (instead of setting
a global error flag an returning), so cleanups and returns
subsequent to calls of smb_panic_fn have become unnecessary.
(This used to be commit 9d2db8c70f10a9285abd4a61fa66ee8aff2e7e6b)
2007-10-10 12:22:02 -05:00
Volker Lendecke
b92064fcfd r22846: Chunk one to replace message_send_pid with messaging_send: Deep inside
locking/locking.c we have to send retry messages to timed lock holders.
The majority of this patch passes a "struct messaging_context" down
there. No functional change, survives make test.
(This used to be commit bbb508414683eeddd2ee0d2d36fe620118180bbb)
2007-10-10 12:22:02 -05:00
Michael Adam
cb47bb6d8f r22845: Modified and extended the winbindd cache validation code:
* Replaced signal catching/longjmp magic by a fork:
  Let the child do the actual validation of the entries.
  Exit code and signals are intercepted by waitpid.
* Fix logic so that also encounter of an unknown key in the
  tdb leads to an error.
* Extended status of validation is kept in a (as yet simple)
  stuct and communicated over a pipe from child to parent.
* Added two validation_ functions for two new keys.

The call of winbindd_validate_cache is still commented out
in the winbindd main loop. But I am currently testing it
and so far it seems to work fine.

The next step in my plan is to generalize the validation
mechanism to a tdb_open_log_validate function in lib/util_tdb.c.
There ist nothing very special about the cache tdb here,
and this might be useful elsewhere...

Michael
(This used to be commit 417325b9e6f9ac0afe1f2f3b552527788f6a7cee)
2007-10-10 12:22:01 -05:00
Volker Lendecke
b4a7b7a888 r22844: Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL }; and
replace all data_blob(NULL, 0) calls.
(This used to be commit 3d3d61687ef00181f4f04e001d42181d93ac931e)
2007-10-10 12:22:01 -05:00
Lars Müller
ddf25a79f6 r22841: Add comment to endif statement.
(This used to be commit 1351207626ee0f99aef93326ef96bf69651bf472)
2007-10-10 12:22:01 -05:00
Alexander Bokovoy
306c355f26 r22840: Add -pie support to Python's setup.py. This should fix build of python libs on recent distributions that take care of security.
(This used to be commit b090b8983bf26779c476c047e952e475c095932e)
2007-10-10 12:22:01 -05:00
Lars Müller
3af6bf6b6e r22839: Fix endif comment.
(This used to be commit e522fb9bb72580a162c46db4e7ee8c7933705cee)
2007-10-10 12:22:01 -05:00
James Peach
8cabd9ab92 r22828: Fix typo. Bugzilla #4589.
(This used to be commit b8959b172090eef6b40ff1fb012d6ff0d3d732ef)
2007-10-10 12:22:00 -05:00
James Peach
2cfc91a11c r22826: Fix the gettimeofday test that I broke in rev 22821.
(This used to be commit 74ca1992056f9a340b3964b17f868a84335333ed)
2007-10-10 12:22:00 -05:00
James Peach
232b2d8349 r22821: Replace unnecessary AC_TRY_RUN with AC_TRY_LINK. Fixes bug #2287.
(This used to be commit 0268eafc26f6d6da25eca582241b136b5a3245ad)
2007-10-10 12:22:00 -05:00
James Peach
2a5d612f34 r22820: Move FAM libraries from smbd to vfs_fam_notify. Should fix bugzilla #4426.
(This used to be commit 9d9950a6d10675c3568179312ff27289d3f9b340)
2007-10-10 12:22:00 -05:00
Volker Lendecke
8190e04663 r22819: Fix Bug 4613. We just dumped the must change & friends. With the
pass_last_changed == 0 we now return "Change now!" instead of "Change
never"
(This used to be commit 450e4d94f64f86a3dd709265d15ed5082d4b53e8)
2007-10-10 12:22:00 -05:00
Jeremy Allison
a4b034d195 r22812: Fix bug #3024 (and also the group varient). Patch from
Johann Hanne <jhml@gmx.net> and also Kaya Bekiro?lu <kaya.bekiroglu@isilon.com>
Jeremy.
(This used to be commit c0ba891be06f49968317a90079554cfce2344f39)
2007-10-10 12:22:00 -05:00
Günther Deschner
c6a51dc5f1 r22803: Add some more flesh to the GPO security filtering (still very basic).
Guenther
(This used to be commit 8cfe32cb9cbe791308368f07b5bdbfcc84ac33d7)
2007-10-10 12:21:59 -05:00
Günther Deschner
4c48a3d30c r22802: Add dummy gpo_apply_security_filtering() call.
Guenther
(This used to be commit 61982d842288d880c24bc4808811452547c0b622)
2007-10-10 12:21:59 -05:00
Günther Deschner
aec3df5ce8 r22801: Pass down the token to add_gplink_to_gpo_list().
Guenther
(This used to be commit 2c2e212bc592b387e23f5b058c72b0ccadda6748)
2007-10-10 12:21:59 -05:00
Günther Deschner
83564b43e3 r22800: Add GPO_SID_TOKEN and an LDAP function to get tokensids from the tokenGroup attribute.
Guenther
(This used to be commit e4e8f840605dfdf92ca60cc8fc6a4c85336565fb)
2007-10-10 12:21:59 -05:00
Günther Deschner
75a0171857 r22799: Fix the build.
Guenther
(This used to be commit 6e911c442bf9b076f43f99576f9b588df2c39233)
2007-10-10 12:21:59 -05:00
Günther Deschner
46c5da2fd6 r22798: Add the "apply group policy" access bit (as seen in type 0x05 ALLOWED OBJECT
ACEs).

Guenther
(This used to be commit e138cbc876e50ae25cb15c5109a42bc8b800c1ba)
2007-10-10 12:21:58 -05:00
Günther Deschner
9c170fce26 r22797: We are only interested in the DACL of the security descriptor, so search with
the SD_FLAGS control.

Guenther
(This used to be commit 648df57e53ddabe74052e816b8eba95180736208)
2007-10-10 12:21:57 -05:00
Günther Deschner
95bc08e954 r22796: Add security descriptor to GROUP_POLICY_OBJECT structure (in preparation of
adding GPO security filtering for libgpo).

Guenther
(This used to be commit b376a39fbf42a6a541fd311418c4a980b9fd4b9e)
2007-10-10 12:21:57 -05:00
Günther Deschner
67a45aa26b r22794: Add "debug_state" and "silent" to pam_winbind.conf template. Honor the silent
argument when parsing pam configuration file options.

Guenther
(This used to be commit 5b4a4df26f32fe1947a0c4fb741a4cb89e308f92)
2007-10-10 12:21:57 -05:00
Volker Lendecke
1cb8a948b3 r22787: More from Karolin: Make map_unix_group() static to net_sam.c, add "net
sam unmapunixgroup"
(This used to be commit 55e2f35fad8bda3ff2c2ace5323ddeaee87d783e)
2007-10-10 12:21:57 -05:00
Volker Lendecke
9e30a76c04 r22786: Some cleanup by Karolin Seeger: Remove unused pdb_find_alias, and change
return values of some alias-releated pdb functions from BOOL to NTSTATUS

Thanks :-)
(This used to be commit 590d2164b3a33250410338771e160f6ebd1aa89d)
2007-10-10 12:21:57 -05:00
Andrew Tridgell
2383ffce69 r22784: fixed change notify for delete on close
(This used to be commit 6f52435a72427a8264096ac14bad54020c9d852b)
2007-10-10 12:21:57 -05:00
Steve French
a6bbf9f9bc r22779: Patch for not prompting for password on cifs mounts when "sec=none"
specified
(This used to be commit 9af97d8ead85c05d08ee24727525894df5866630)
2007-10-10 12:21:56 -05:00
Michael Adam
0aab2a8251 r22777: Fix for [Bug 4543] - POSIX ACL support on FreeBSD.
This adds vfs_posixacl to the list of static modules and
makes use of HAVE_ACL_GET_PERM_NP.

This is just a quick fix. FreeBSD acl support is still
hardcoded in configure.in, but actually this could be
detected in a unified test for freebsd, linux, *,
as suggested in the bugreport. This has still to be
checked and elaborated.

Michael
(This used to be commit af94654772f743f0c0b7809ff3f2ef019feb713a)
2007-10-10 12:21:56 -05:00
Volker Lendecke
4c185a6077 r22775: For the cluster code I've developed a wrapper around tdb to put different
database backends in place dynamically.

The main abstractions are db_context and db_record, it should be mainly
self-describing, see include/dbwrap.h.  You open the db just as you would open
a tdb, this time with db_open(). If you want to fetch a record, just do the
db->fetch() call, if you want to do operations on it, you need to get it with
fetch_locked().

I added dbwrap_file.c (not heavily tested lately) as an example for what can
be done with that abstraction, uses a file per key. So if anybody is willing
to shape that up, we might have a chance on reiserfs again.... :-)

This abstraction works fine for brlock.tdb, locking.tdb, connections.tdb and
sessionid.tdb. It should work fine for the others as well, I just did not yet
get around to convert them.

If nobody loudly screams NO, then I will import the code that uses this soon.

Volker
(This used to be commit e9d7484ca246cfca4a1fd23be35edc2783136ebe)
2007-10-10 12:21:56 -05:00
Derrell Lipman
ad3bed14f1 r22773: - Clean up the the rest of the cruft from my earlier work on the readahead()
missing declaration problem.
(This used to be commit 44365130ce794e442f52ec7cf3fc51065f713c5f)
2007-10-10 12:21:56 -05:00
Derrell Lipman
1b55cf4384 r22772: - Still working on the fact that readahead() is not declared (on at least one
OS) but is available for linking.  Instead of running configure tests with
  -Werror-implicit-function-declaration in developer mode (which may lead to
  different library functions being used in developer mode than when not in
  developer mode), add tests for whether readahead is declared.  If not,
  provide a replacement declaration in lib/replace.
(This used to be commit 7d05fa8b32b5b33e95fd9d552d2a45013b4803ec)
2007-10-10 12:21:56 -05:00