1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-12 20:58:37 +03:00

19672 Commits

Author SHA1 Message Date
Paul Green
5255388e95 r15644: Now that we are referencing uint32_t and other data types
defined in <stdint.h>, ensure that it is present. (Not all
implementations pull it in when <sys/types.h> is used).

Paul
(This used to be commit dafe36ec4cff4e5f94e35841966007e3e4758582)
2007-10-10 11:17:05 -05:00
Volker Lendecke
c290d34985 r15635: Fix a bogus gcc uninit variable message
(This used to be commit 53f7104b4fbb4f59c18458f589e25e7b536642cb)
2007-10-10 11:17:04 -05:00
Günther Deschner
ae0939ee66 r15634: Prevent passwords of winbindd's list of credential caches from beeing
swapped to disc using mlock(). (patch was reviewed by Jeremy).

Guenther
(This used to be commit 206cdbb8e9a4a0900060d56510e58b85a2b8aec5)
2007-10-10 11:17:04 -05:00
Günther Deschner
22bed618b6 r15633: Minor smbldap/pdb_ldap cleanup
Guenther
(This used to be commit 1b5a712467ab8f35211b59bb703a42bdc5e0dfc0)
2007-10-10 11:17:04 -05:00
Günther Deschner
651797b41e r15632: Remove length limitation from the winbind cache cleanup traversal.
Guenther
(This used to be commit 181fa02497e353a36e311f94f5bec2e9cfd1b56e)
2007-10-10 11:17:04 -05:00
James Peach
0ed76af63d r15631: Add a new option "enable core files". Administrators can use this to
disable automatic core file dumping. Core files are enabled by default.
(This used to be commit b59189280057849b67ac65f31cec23b859e21c91)
2007-10-10 11:17:03 -05:00
Jim McDonough
62f61caff4 r15630: adapt smbclient fix to smbtree to enable long share names
(This used to be commit ae56154fc7694042496a55d4dade8ef1a7ba361c)
2007-10-10 11:17:03 -05:00
Stefan Metzmacher
039113fe15 r15620: pass 'target:samba3=yes' to samba4's smbtorture when running samba3's make test
we can use this in samba4's smbtorture to disable tests sections which doesn't pass
against samba3

metze
(This used to be commit fab4de70b65ab5b9d3a93db46f13c7bab0e70464)
2007-10-10 11:17:03 -05:00
James Peach
39c7fe679e r15611: Remove used but uninitialised variable "count".
(This used to be commit 71fd0d3de4a02b9a7b67914f6412f18ec0bb5e7a)
2007-10-10 11:17:03 -05:00
Jeremy Allison
f9480025b5 r15610: Fix Coverity #288 - possible null deref.
Jeremy.
(This used to be commit b108ab7b122cc607f31772614b221379403b211b)
2007-10-10 11:17:03 -05:00
Volker Lendecke
bb4856b14a r15608: Fix a couple of Coverity errors
(This used to be commit 696e210bf6688e8b2f408559768173b4bdbda979)
2007-10-10 11:17:03 -05:00
Volker Lendecke
75d2304643 r15601: Fix segfaults with 'security=share' and 'guest only = yes'
Volker
(This used to be commit ea7cced6bcb3cb7d817e4cb072774692e4afedb0)
2007-10-10 11:17:03 -05:00
Volker Lendecke
990c406a89 r15600: Correctly fill in the gid for local users.
Volker
(This used to be commit 6071dd5db0dbb79a80b248ab93942911bf08fd2b)
2007-10-10 11:17:02 -05:00
Gerald Carter
b16bdf985d r15597: more ads join fixes -- we can only set the PWDNOEXP and DES_ONLY acb flags on the setuserinfo(), not the createuser info call
(This used to be commit d933ac273db5977fb41954175bdc228b688bfd6e)
2007-10-10 11:17:02 -05:00
Volker Lendecke
ee7b4b47cb r15589: While trying to understand the vuid code I found that security=share is broken
right now. r14112 broke it, in 3.0.22 register_vuid for security=share returns
UID_FIELD_INVALID which in current 3_0 is turned into an error condition. This
makes sure that we only call register_vuid if sec!=share and meanwhile also
fixes a little memleak.

Then I also found a crash in smbclient with sec=share and hostmsdfs=yes.

There's another crash with sec=share when coming from w2k3, but I need sleep
now.

Someone (jerry,jra?) please review the sesssetup.c change.

Thanks,

Volker
(This used to be commit 8059d0ae395604503cad3d9f197928305923e3f5)
2007-10-10 11:17:02 -05:00
Volker Lendecke
3895a5a1fc r15583: Add a comment while trying to understand this code
(This used to be commit 7945c935bf197afb61286ddeb0e579078362a1fc)
2007-10-10 11:17:02 -05:00
Volker Lendecke
91828b893d r15571: Fix Coverity bug #285
(This used to be commit 2cf503d7da08319f318217f6fe8f85c18bf0dffb)
2007-10-10 11:17:02 -05:00
Volker Lendecke
77aa11f4dc r15570: Fix Coverity bug # 286. I really wonder why gcc -O1 did not catch this one.
Volker
(This used to be commit c6bf2c8922e612278349fe53ca11f6be6c819009)
2007-10-10 11:17:02 -05:00
Volker Lendecke
5895967601 r15569: Fix Coverity bug # 287. Jerry, can you check if WERR_NOMEM is a correct error
code here?

Thanks,

Volker
(This used to be commit 5787bd0ee90b081ae12a4a976893cb297fa7bed4)
2007-10-10 11:17:01 -05:00
Volker Lendecke
f390936c5b r15566: Fix Coverity bug # 284. The lp_ldap_xx_suffix function only return NULL if
talloc fails.

Volker
(This used to be commit 0ece5b32f97f162be0af2ea3354a597c56ed4373)
2007-10-10 11:17:01 -05:00
Volker Lendecke
c2e6ebe22c r15562: Attempt to fix Coverity bug # 283
(This used to be commit 3762effca5e1e2bbb2d1d9dd8504c502485eca7d)
2007-10-10 11:17:01 -05:00
Gerald Carter
bc89437cca r15561: Should re-fix older systems without RC4-HMAC support
(This used to be commit 00c795e3660a65419e707706abf48916dcd7f850)
2007-10-10 11:17:01 -05:00
Gerald Carter
f1039b8fb4 r15560: Since the hotel doesn't have Sci-Fi and no "Doctor Who"....
Re-add the capability to specify an OU in which to create
the machine account.  Done via LDAP prior to the RPC join.
(This used to be commit b69ac0e30441faea7a7d677b6bb551aa8ffbf55d)
2007-10-10 11:17:01 -05:00
Günther Deschner
453e4b50aa r15559: Smaller fixes for the new cldap code:
* replace printf to stderr with DEBUG statements as they get printed in
  daemons
* "net ads lookup" return code

Guenther
(This used to be commit 8dd925c5fbfcbe711c596d08e8eadc19607d5492)
2007-10-10 11:17:01 -05:00
Günther Deschner
bae13fd8c8 r15558: Do not wait endless for a CLDAP reply when the LDAP server is
unavailable; use "ldap timeout" handling.

Jerry, please check.

Guenther
(This used to be commit 821bbb4566c4b3f9798054ed3bf772db0c9ae3f2)
2007-10-10 11:16:59 -05:00
Jeremy Allison
a041b6b672 r15556: Better fix for leading // or \\ from "David R. Linn"
<drl@vuse.vanderbilt.edu>.
Jeremy.
(This used to be commit 502f3e911a2e9e3e0e4a4eae34885329e0624dd5)
2007-10-10 11:16:59 -05:00
Jeremy Allison
2602e5fab1 r15555: Make "change notify timeout" a per-share parameter - used
when there's no kernel or FAM change notify. If set to zero
this will turn off change notify for the share except when
we ourselves change something (renames / deletes etc. ).
Designed to help on large directory shares where a new
changenotify is issued between each delete. This will
be fixed correctly when we move to internal change notify
(eg. back-port Samba4 changenotify).
Jeremy.
(This used to be commit 5a17bffbcd5082fde79c241468a0ff2b5903d540)
2007-10-10 11:16:59 -05:00
Günther Deschner
c8baac2fd6 r15553: minor rpcclient cleanup: length is already set in data_blob.
Guenther
(This used to be commit a80f3660573872e7a1c9e4d37262c830d68415e1)
2007-10-10 11:16:59 -05:00
Günther Deschner
f5e79ae825 r15552: Fix segfault...
Guenther
(This used to be commit ff93fc7c1e22c035f6f1405d263702bbb9d61575)
2007-10-10 11:16:58 -05:00
Gerald Carter
8c76903efb r15550: make sure to pick up the -lresolv libs on systems without -lldap to pull it in
(This used to be commit 4f3a1c2c58a4087f3a2f72f471cbaf2bad5addfe)
2007-10-10 11:16:58 -05:00
Gerald Carter
18d5a26f74 r15549: removing rhosts and 'hosts equiv' authentication features
(This used to be commit d19dad88155f985f113c667b6bdad5a1b25eca18)
2007-10-10 11:16:58 -05:00
Gerald Carter
1d650a276b r15548: remove unused 'wins partners'
(This used to be commit 1316fd4267f37cd88ab5c63d22df81ace17205bc)
2007-10-10 11:16:58 -05:00
Gerald Carter
745e2490ae r15547: say goodbye to --with-ldapsam (although the ldapsam_compat passdb backend still exists
(This used to be commit 7d99e05ee8f60b2b4d18405dc8be6f9ff822c3ad)
2007-10-10 11:16:58 -05:00
Günther Deschner
f01b0cca2e r15546: When debugging is enabled be just a little more verbose in logging in
pam_winbind.

Guenther
(This used to be commit bf077fb2268b79faffd1fdda04847c37ffead32d)
2007-10-10 11:16:57 -05:00
Gerald Carter
163d5ead3a r15544: make sure to define NS_PACKETSZ for Bind 4 interfaces (fix build on us4)
(This used to be commit 18f2e1a4e19a83afec6573a020f3a913f07d19dc)
2007-10-10 11:16:57 -05:00
Gerald Carter
2c029a8b96 r15543: New implementation of 'net ads join' to be more like Windows XP.
The motivating factor is to not require more privileges for
the user account than Windows does when joining a domain.

The points of interest are

* net_ads_join() uses same rpc mechanisms as net_rpc_join()
* Enable CLDAP queries for filling in the majority of the
  ADS_STRUCT->config information
* Remove ldap_initialized() from sam/idmap_ad.c and
  libads/ldap.c
* Remove some unnecessary fields from ADS_STRUCT
* Manually set the dNSHostName and servicePrincipalName attribute
  using the machine account after the join

Thanks to Guenther and Simo for the review.

Still to do:

* Fix the userAccountControl for DES only systems
* Set the userPrincipalName in order to support things like
  'kinit -k' (although we might be able to just use the sAMAccountName
  instead)
* Re-add support for pre-creating the machine account in
  a specific OU
(This used to be commit 4c4ea7b20f44cd200cef8c7b389d51b72eccc39b)
2007-10-10 11:16:57 -05:00
Günther Deschner
fc5f948260 r15542: Close the LDAP connection and free the struct, regardless whether the
simple bind operation was successful or not.

Guenther
(This used to be commit e4734cb99cae189edf49c4d8f4e4324f5c51f443)
2007-10-10 11:16:57 -05:00
Günther Deschner
f9a4dcb4da r15541: Only ever store a user's password in a WINBINDD_CCACHE_ENTRY struct when
we have a reason to do so.

Guenther
(This used to be commit 4da79bd10c17277171aad26ee0278f8e5b64abdb)
2007-10-10 11:16:57 -05:00
Jeremy Allison
71465a6fbc r15539: Use portable wrapper functions instead of seteuid
directly in winbindd.
Jeremy.
(This used to be commit 2e65fcc9def5f1386a33ca4a76e494838e3a0632)
2007-10-10 11:16:56 -05:00
Jeremy Allison
2dd8857dcb r15537: Ignore // or \\ in //server or \\server.
Jeremy.
(This used to be commit 45cfba12cfd87bebd3876087cac0575f586e395f)
2007-10-10 11:16:56 -05:00
Stefan Metzmacher
4629fab3e4 r15531: fix linking of smbmnt and smbumount with socket wrapper
metze
(This used to be commit a48b1f7fae538a4220e087a1863015dd8c564005)
2007-10-10 11:16:56 -05:00
James Peach
8de0dcb3d9 r15529: Initialise our saved uid and gid so that we can tell when
we created the profiling shmem segment and don't bogusly
refuse to look at it.
(This used to be commit eb31ef3a0e5e7c3b4029a3c2e124d2df646f10a2)
2007-10-10 11:16:56 -05:00
Günther Deschner
f65ff9d637 r15528: Make the existance of the /etc/security/pam_winbind.conf file
non-critical and fallback to only parse the argv options in that case.

Guenther
(This used to be commit 9dac3ab328e9c7ba374e0efc3fe16d940ecc9d3b)
2007-10-10 11:16:56 -05:00
Günther Deschner
7029a2ee70 r15526: Avoid double \n.
Guenther
(This used to be commit 3546187bb4a74b14071e2c23561e70e57ad13e86)
2007-10-10 11:16:56 -05:00
Gerald Carter
26443e8c0b r15525: fix compile error on HP-UX reported by Ryan Novosielski
(This used to be commit e439660f916050291107f699e32ba2872ba95fcf)
2007-10-10 11:16:56 -05:00
Günther Deschner
f777697508 r15523: Honour the time_offset also when verifying kerberos tickets. This
prevents a nasty failure condition in winbindd's pam_auth where a tgt
and a service ticket could have been succefully retrieved, but just not
validated.

Guenther
(This used to be commit a75dd80c6210d01aff104a86b0a9d39d65f2c348)
2007-10-10 11:16:55 -05:00
Günther Deschner
767ac75e6b r15519: Fix segfault.
Guenther
(This used to be commit a0548914c21bb769c3e97b47c9bc521c595f579b)
2007-10-10 11:16:55 -05:00
James Peach
a4638ab379 r15516: Use SMB_BIG_UINT in preference to unsigned long long.
(This used to be commit f06d94382fa0f501fb1da7e308012b91a9eadb44)
2007-10-10 11:16:55 -05:00
James Peach
a51ce2bfbe r15509: Preserve errno in fcntl lock wrappers.
(This used to be commit 624318245fbd4060617d9404700a04df23d667ac)
2007-10-10 11:16:55 -05:00
James Peach
826614ed16 r15508: Use clock_gettime for profiling timstamps if it is available. Use
the fastest clock available on uniprocessors.
(This used to be commit d44862928206b524f826bd7c2997ab5353c0b6a0)
2007-10-10 11:16:55 -05:00