sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
Code
15,491 Commits 60 Branches 1,144 Tags 452 MiB
7e75a6d681
Commit Graph

13200 Commits

Author SHA1 Message Date
Andrew Bartlett
7e75a6d681 Romve debugging assertions (oops...) 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
35f6347a73 Add a new type of name lookup 'ads'. This seperates this from normal 
hostname lookups, and ensures that we don't lookup 'short' (ie NetBIOS)
domain names in DNS.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
65b01f67d5 Use StrCaseCmp, not strcasecmp. Should fix winbind build on IRIX 0001-01-01 00:00:00 +00:00
Gerald Carter
ba9dc0d9fd fix segfault when sid_ptr == 0 in DsEnumDomainTrusts() reply 0001-01-01 00:00:00 +00:00
Gerald Carter
8e8a351cab fix a seg fault caused by abartlet's last checkin; there's no way this could have been tested against an NT4 DC 0001-01-01 00:00:00 +00:00
Andrew Bartlett
595dee6607 use SAFE_FREE(), not free(). 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
7c34de8096 This merges in my 'always use ADS' patch. Tested on a mix of NT and ADS 
domains, this patch ensures that we always use the ADS backend when
security=ADS, and the remote server is capable.

The routines used for this behaviour have been upgraded to modern Samba
codeing standards.

This is a change in behaviour for mixed mode domains, and if the trusted
domain cannot be reached with our current krb5.conf file, we will show
that domain as disconnected.

This is in line with existing behaviour for native mode domains, and for
our primary domain.

As a consequence of testing this patch, I found that our kerberos error
handling was well below par - we would often throw away useful error
values.  These changes move more routines to ADS_STATUS to return
kerberos errors.

Also found when valgrinding the setup, fix a few memory leaks.

While sniffing the resultant connections, I noticed we would query our
list of trusted domains twice - so I have reworked some of the code to
avoid that.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
c9f9d6d317 In tdb_allocate(), we would create a new record by writing a local variable 
'newrec' into the tdb.

This was not initialised, so valgrind warned about it.

(Note:  valgrind only makes sense on tdbs with 'mmap = no' in your smb.conf)

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
7e6cc8f003 Make it clearer that the domain here is the domain of the user for 
authentication.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
2e6eaad9ce Move more of winbind to use 'find_our_domain()' rather than the dangerous 
find_domain_from_name(lp_workgroup()).

(as find_domain_from_name() can change the data in lp_workgroup())

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
703f101136 The correct test for 'is our primary domain' is domain->primary 0001-01-01 00:00:00 +00:00
Andrew Bartlett
6a9bbd1da3 Machines are people too! 
While machine accounts cannot use an NTLM login (NT4 style), they are
otherwise full and valid members of the domain, and expect to be able to
use kerberos to connect to CIFS servers.

This means that the LocalSystem account, used by various services, can
perform things like backups, without the admin needing to enter further
passwords.

This particular issue (bug 722) has started to come up a lot on the lists.

I have only enabled it for winbindd-based systems, as the macros use use
to call the 'add user script' will strip the $ from the username for
security reasons.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jeremy Allison
fac9e6d712 Fix for bug #922. Fast path not called for strlower_m() and strupper_m(). 
From ab@samba.org (Alexander Bokovoy).
Jeremy.
 0001-01-01 00:00:00 +00:00
Rafal Szczesniak
5d7f81eea2 Typo fix. 
rafal
 0001-01-01 00:00:00 +00:00
Rafal Szczesniak
b5e492b8ea Doxygen comment fix. 
rafal
 0001-01-01 00:00:00 +00:00
Jeremy Allison
7c4d52014e Fix from Justin Baugh <justin.baugh@request.com> for bugid #948 for 
FreeBSD winbindd.
Jeremy.
 0001-01-01 00:00:00 +00:00
Gerald Carter
344e113368 commiting jra's fix for Exchange clear test auth 0001-01-01 00:00:00 +00:00
Jeremy Allison
8e20c06ed3 Fix from Luke Howard <lukeh@PADL.COM> for incorrect early free(). 
Jeremy.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
85da181e8a Don't duplicate pulling the 'IPC' username from secrets.tdb, instead 
just use one function for both places.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Volker Lendecke
d429536817 There is a German translation of swat -- surprise :-) 
Fix some msgs

Volker
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
82bd1b45a4 Add smbget utility, a simple wget-like utility that uses libsmbclient. 
Supports recursive downloads and resume, progress indication and shows
estimated time remaining.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
4ad67f1340 Fix segfualt caused by incorrect configuration. If lp_realm() was not set, 
but security=ADS, we would attempt to free the principal name that krb5
never allocated.

Also fix the dump_data() of the session key, now that we use a data_blob to
store that.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jeremy Allison
d75db0bf1e Patch penguin. Cleaning out old mbp patch. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
7495395c1c Fix -s option to smbcontrol (#908) 0001-01-01 00:00:00 +00:00
Gerald Carter
fac5e05ca1 remove unused seek_file(); don't hardcode '\' when printing the auth-user 0001-01-01 00:00:00 +00:00
Gerald Carter
52480d6d05 bumping to 3.0.2pre2 0001-01-01 00:00:00 +00:00
Gerald Carter
7d7a262f45 isolate ldap debug messages to the common smbldap_XXX() functions 0001-01-01 00:00:00 +00:00
Jeremy Allison
cae5f158e5 XFS quota patch from Stefan Metzmacher <metze@metzemix.de>. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Volker Lendecke
50be537b19 Correctly detect AFS headers on SuSE in /usr/include/afs/afs/ 
Volker
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
5d43e00a49 Patch by Stefan Metzmacher <metze@metzemix.de>: 
here's a small fix that fixes the new quota system on irix.

I need to reanable XFS quotas on irix for the new quota system
(Jerry do you want to wait for this for the release ?)

But the old system works and is the default on irix!
 0001-01-01 00:00:00 +00:00
Jeremy Allison
019aaaf0df Patch based on work from James Peach <jpeach@sgi.com> to convert over to 
using pread/pwrite. Modified a little to ensure fsp->pos is correct.
Fix for #889.
Jeremy.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
93a5d8079a Ensure that for wbinfo --set-auth-user, we actually use the domain. 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Steve French
865fcdcb85 cifs mount helper merge 0001-01-01 00:00:00 +00:00
Andrew Bartlett
ba33f1e0d5 Fix more cases to ensure that as a server, we don't complain to the client 
about our server-side lack of session key.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jeremy Allison
ffaf9982dc Added last missing file. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
52eafc131e Oops. Broke the build. Added missing files. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
1b1c216122 Fix from James Flemer <jflemer@uvm.edu> to make HAVE_ATTR_LIST linked to 
HAVE_SYS_ATTRIBUTES_H to fix AIX compile.
Jeremy.
 0001-01-01 00:00:00 +00:00
Gerald Carter
134cf1d546 fix inverted check using krb5_kt_resolve() and HAVE_MEMORY_KEYTAB; bug 912 0001-01-01 00:00:00 +00:00
Jeremy Allison
4350aa6ce6 Patch from Stefan (metze) Metzmacher <metze at metzemix.de> to revert to 2.2.x quota methods. 
:-).

"here's a patch which ports the samba 2.2 samba_linux_quota.h stuff to 3_0.

This is needed because of so many broken quota files outthere.

Please, test this with old, new kernels
(strucr dqblk, struct mem_dqblk, and struct if_dqblk)
, quota.user, aquota.user formats

what is when a user is over soft quota and over hard quotas..."

Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
84d34e32be Ensure we set "always sign" flag if set. We don't currently do anything with 
this but we should log the fact it was negotiated.
Jeremy.
 0001-01-01 00:00:00 +00:00
Volker Lendecke
541e6998a0 Fix warning 
Volker
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
39311495de Don't free the encrypted_session_key early - that causes the subsequent 
test for a valid length to fail...

This should fix 'security=server' and hosts-equiv failures picked up by
the build farm.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
7e5855dfd2 shorten some more lines. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
3a4c56e4c6 Try to keep vl happy - shorten some of these lines. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
687aececa6 Grumble... grumble... fix the build... 0001-01-01 00:00:00 +00:00
Andrew Bartlett
3d91b0a006 Show the sid type in name->sid translatons in a way that can be easily 
understood by humans.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
379368b0be Always call the auto-init funciton - this avoids tdb segfaulting under 
us if we failed to open it earlier.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
da408e0d5a Correctly handle per-pipe NTLMSSP inside a NULL session. Previously we 
would attempt to supply a password to the 'inside' NTLMSSP, which the
remote side naturally rejected.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
32397c8b01 Change our Domain controller lookup routines to more carefully seperate 
DNS names (realms) from NetBIOS domain names.

Until now, we would experience delays as we broadcast lookups for DNS names
onto the local network segments.

Now if DNS comes back negative, we fall straight back to looking up the
short name.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
aacb817e89 Add const. 0001-01-01 00:00:00 +00:00