1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-05 21:57:51 +03:00

17017 Commits

Author SHA1 Message Date
Volker Lendecke
e66c8217f8 r2935: This is a long-standing one in my patch-queue: A pair of net commands
(usersidlist/allowedusers) to scan a file server's share and list all users
who have permission to connect there.

Volker
(This used to be commit f7f84aa1ded70af3882e4122f34d5c7eed746993)
2007-10-10 10:52:57 -05:00
Tim Potter
4fb2bbb32b r2924: Another #if that should be an #ifdef.
(This used to be commit b6193f6d52a148c05b6b7cc33553f3b8ff94b64e)
2007-10-10 10:52:56 -05:00
Günther Deschner
5976f2327b r2923: Fix some obvious copy/paste leftover debug-messages.
Guenther
(This used to be commit 94f48d06c774eb137fef70063e6f29e5d5a6ba9d)
2007-10-10 10:52:56 -05:00
Gerald Carter
a169b950c7 r2918: BUG 1907: fix getprinterdriverdir_1(). have to make sure we don't add unnecessary double slashes to the servername
(This used to be commit 859599dbcaa9e39a7902cc959955fcea2dad334b)
2007-10-10 10:52:56 -05:00
Steve French
86228705c0 r2917: Fix ip address override in mount.cifs mount helper and clean up warning messages from the sparse tool and expand syntax help
(This used to be commit 1052eabf29f6c197b126f44d32fd5c5bc8f4a9c3)
2007-10-10 10:52:56 -05:00
Richard Sharpe
ce873b76c8 r2905: Apply the patch for bug #1822. Add -D_REENTRANT to CPPFLAGS and -lthread
to LDFLAGS.

Patch supplied by Sean McGrath ...
(This used to be commit d704272b0a27c51dbe9c5c5f04134ce559bea2c4)
2007-10-10 10:52:56 -05:00
Tim Potter
8f49721fef r2899: Change some #if DEBUG_PASSWORD's to #ifdef DEBUG_PASSWORD.
Bugzilla #1903.
(This used to be commit 1327d83d902b6a39096d387d734e73d85ed53f85)
2007-10-10 10:52:56 -05:00
Tim Potter
f08b3e2e25 r2894: Certain versions of GNU ld the default is not to have the
--allow-shlib-undefined flag defined.  This causes a stackload of
warnings when building modules.

Fix by Michel Gravey which closes bugzilla #1776.
(This used to be commit ad53c555131634ba29deea448e4fd184e78e8d4a)
2007-10-10 10:52:55 -05:00
Andrew Bartlett
4792a8de30 r2868: Well, I'm not quite sure what I'm doing back in Samba 3.0, but anyway...
I've been grumbling about under-efficient calls in SAMR, and finally
got around to fixing some of them.

We now call sys_getgroups() (which in turn calls initgroups(), until
glibc 3.4 is released) to figure out a user's group membership.  This
is far, far more efficient than scanning all the groups looking for a
match, and is still the 'posix way', just using an effiecient call.

The seperate issue of 'who is in this group' remains, but this one has
been biting some people.

I need to talk to VL about how best to exersise nasty corner cases,
but my initial tests hold strong.  (The code is also much simpiler
than before, which has to count for something :-)

Andrew Bartlett
(This used to be commit dc19f161698dab5b71d61fa2bacc7e7b8da5fbba)
2007-10-10 10:52:55 -05:00
Andrew Bartlett
3d50211480 r2865: Add static and remove unused functions that only cload the blame-game
in finding out who is causing the massive performance problems with
large LDAP directories.

Andrew Bartlett
(This used to be commit f16ed2616a67c412bc9b78354a5faf673e64cf42)
2007-10-10 10:52:55 -05:00
Günther Deschner
d15e6af706 r2852: Oh. Allow to migrate win2k3/xp-drivers as well.
Thanks to Bjoern Jacke for his moral support :)

Guenther
(This used to be commit ab875d3ecf3a80f5648432f7f4573f57442e6698)
2007-10-10 10:52:55 -05:00
Günther Deschner
e81aa8c59e r2837: Fix printer-migration w.r.t. to new naming-convention for
policy-handles. Also remove some unused vars.

Guenther
(This used to be commit 5181c1b2192d1802616e8c30cd9458c00a306a46)
2007-10-10 10:52:55 -05:00
Tim Potter
b4cf9e9505 r2835: Since we always have -I. and -I$(srcdir) in CFLAGS, we can get rid of
'..' from all #include preprocessor commands.   This fixes bugzilla #1880
where OpenVMS gets confused about the '.' characters.
(This used to be commit 7f161702fa4916979602cc0295919b541912acd6)
2007-10-10 10:52:55 -05:00
Tim Potter
66e689478a r2834: Netapps can return NT_STATUS_ACCESS_DENIED when trying to return the
security descriptor for a file.  Return an error in this case instead
of panicing trying to unpack a zero length buffer.  Found by Brett
Funderburg.
(This used to be commit 588de0d4a84a5228d0f99f743ad327ad3b70ead1)
2007-10-10 10:52:54 -05:00
Günther Deschner
132879b285 r2832: Readd WKGUID-binding to match the correct default-locations of new
User-, Group- and Machine-Accounts in Active Directory (this got lost
during the last trunk-merge).

This way we match e.g. default containers moved by redircmp.exe and
redirusr.exe in Windows 2003 and don't blindly default to cn=Users or
cn=Computers.

Further wkguids can be examied via "net ads search wellknownobjects=*".
This should still keep a samba3-client joining a samba4 dc. Fixes
Bugzilla #1343.

Guenther
(This used to be commit 8836621694c95779475fa9a1acf158e5e0577288)
2007-10-10 10:52:54 -05:00
Tim Potter
4fd4aa1152 r2828: Fix for bugzilla #1864 from Brett again.
Add sd->type field to security descriptor Python representation.
(This used to be commit b157a1b7c3e15a960fbc943d37abbb1bf5053a63)
2007-10-10 10:52:54 -05:00
Jelmer Vernooij
1cc0c7414a r2826: Complain if 'password chat' doesn't contain the %u variable. based on a patch by Ronan Waide
(This used to be commit a48b3b291cfe5883da1a36b368ddf725b5ff9375)
2007-10-10 10:52:54 -05:00
Andrew Tridgell
d9b8eaabc5 r2824: restored the is_case_sensitive option to ms_fnmatch() in Samba3. It is
very rarely used, but we sohuldn't be removing a feature in a minor
release of this kind.
(This used to be commit 4ce0505bc369243aa77013519ce4e4f6e50f5a48)
2007-10-10 10:52:54 -05:00
Tim Potter
56fd69174e r2823: Patch from Brett Funderburg to pass create options parameter to
nt_create_andx() function.
(This used to be commit fa3e8365641e84ca361dc95bac33a9d56e9d799b)
2007-10-10 10:52:54 -05:00
Tim Potter
cc47bf9975 r2822: Fix parameter confusion in priming of name-to-sid cache. Found by
Qiao Yang.
(This used to be commit 30ae13cb9fbe5f04e46bcbd5e0c19da9b33341d5)
2007-10-10 10:52:53 -05:00
Günther Deschner
2d016a67b8 r2821: Adding "Windows x64" as architecture string and driverdir "x64" for the
64bit AMD platform.

(This used to be "Windows AMD64" and "AMD64" in one of the release
candidates of SP2 for Windows XP. AMD64 is obviously still supported but
not documented.)

Guenther
(This used to be commit cc5892f0411b8eb5daebe746164a2cf21d3d4c68)
2007-10-10 10:52:53 -05:00
Günther Deschner
c5ccf8edaf r2819: Make 'password history'-behaviour in ldapsam more consistent.
Currently we cannot store more then 15 password history entries (windows
NT4 allows to store 24) in ldapsam. When choosing more then "15" with
pdbedit -P "password history", we fail to initialize the password
history upon password change and overwrite the history, effectively
using a password history of "1". We do already decrease any
history-policy larger then 15 to 15 while storing the password history
list attribute in ldap.

Guenther
(This used to be commit a4b47e71475a06c2e2287613b00648c5f53ae52c)
2007-10-10 10:52:53 -05:00
Rafal Szczesniak
c56e526e19 r2814: Exactly the same as "main" build fix.
rafal
(This used to be commit 7fa94c38951fcd803a8e769a867a008e47f4129a)
2007-10-10 10:52:53 -05:00
Rafal Szczesniak
8199abf7d8 r2813: Fix the build.
At least temporarily, since I've got the impression that _real_ fix
is more complex...

rafal
(This used to be commit 982912f0c8547b0f0edc8d0b26e36e9701cdee82)
2007-10-10 10:52:53 -05:00
Andrew Bartlett
9f9efc0d3b r2779: Some fixes to pam_winbind.c.:
Allow 'require_membership_of' and 'require-membership-of'.

Really use a different struct for the SID->Name lookup.

Andrew Bartlett
(This used to be commit 83dadcd089905aa8ff3392010177ffa1dc8237ba)
2007-10-10 10:52:52 -05:00
Andrew Tridgell
640f124ca2 r2778: merged the new samba4 ms_fnmatch code to Samba3. Thanks to Rusty
Russel for some help in designing the new algorithm.
(This used to be commit 38144f8d2cda32edacf90725f28e763689128d0d)
2007-10-10 10:52:52 -05:00
Günther Deschner
96876f696e r2772: Check correct string length when verifying password-policies. Do not
allow e.g. two umlauts and one ascii char to comply with account-policy
"min password length" of 5.

Thanks to Uwe Morgenroth from CC Compunet and Volker.

TODO: we do check the length against AP_MIN_PASSWORD_LEN *and*
lp_min_passwd_length() - both can have differing values.
(This used to be commit d03683772942e8c32507be210b8fd35bfba2c048)
2007-10-10 10:52:52 -05:00
Günther Deschner
b2dc329d43 r2771: Second (and last) part of Swat-i18n-Patch from Björn Jacke
<bjacke@sernet.de>

"Do not use display charset for swat output. In HTML we do not care
about the "locale charmap" because HTML code is UTF-8 only now.
Additionally take care that we convert files from statuspage from unix
charset to UTF-8. Thus we have correct HTML output under all
circumstances. We now also convert the share names correctly from unix
encoding to web encoding and vice vera.  "

Guenther
(This used to be commit 6d9f77c2bb95db4939b8ef375e22b188168b70ab)
2007-10-10 10:52:52 -05:00
Gerald Carter
13720fbb3e r2770: oops; internal_resolve_name() should stay static in 3.0
(This used to be commit 316302ca4a79cfc201311e12df71fdbb974c09c4)
2007-10-10 10:52:52 -05:00
Gerald Carter
31441aaa13 r2768: BUG 1519: save the hostname used in the open_printer_ex() for later reuse when filling in the spolss replies (also gets rid of get_called_name()
(This used to be commit 57db8ca91f52329c7f8985c04463b6b69015b0c4)
2007-10-10 10:52:52 -05:00
Andrew Bartlett
f219db7d69 r2762: Remove silly conversion to and from UTF8 on the winbind pipe. Fix the
naming of the require_membership_of parameter in pam_winbind and fix
the error code for 'you didn't specify a domain' in ntlm_auth.

Andrew Bartlett
(This used to be commit 4bf0b94011fe6bfbec5635e58cafbfe3dc898569)
2007-10-10 10:52:51 -05:00
Andrew Bartlett
90cd0c339c r2761: Print the decrypted, not encrypted key.
Andrew Bartlett
(This used to be commit 1833d0ab724d88411ebd79ac26f5642e7c8cfee3)
2007-10-10 10:52:51 -05:00
Tim Potter
3015135314 r2760: Another patch from The Written Word. Don't declare function prototypes
inside a function.  Bugzilla #1762.
(This used to be commit 002cdd4a5b34611983a32018248f9fe122c4111a)
2007-10-10 10:52:51 -05:00
Tim Potter
02c9b46fab r2759: Fix for winbindd on AIX 5.1. Apparently it doesn't have as many methods
in struct secmethod_table as AIX 5.2.  Patch from The Written Word.
(This used to be commit 4f8496ad626478c31e9372e07652d50f581256d0)
2007-10-10 10:52:51 -05:00
Andrew Bartlett
e357bc3216 r2755: Fix NTLMv2 for use with pam_winbind, the plaintext ntlm_auth modes,
and the wbinfo -a test tool.

If 'client ntlmv2 auth' is set, then we will send an NTLMv2, rather
than an NT/LM response to the server.

Andrew Bartlett
(This used to be commit ce2456e436c5d57cd95cd10c6edf759592d0e843)
2007-10-10 10:52:51 -05:00
Günther Deschner
823936d180 r2753: Workaround for the (rather broken) _samr_query_useraliases rpc-call.
_samr_query_useraliases shows up with all kind of very weird memberships
(global-groups, machine-accounts, etc.). Sometimes even if there is no
alias-membership at all.

One of the biggest mistakes is to convert any unix-group the user is a
member of, into an alias by default in get_group_from_gid.

get_alias_user_groups should be rewritten to use
pdb_enum_alias_memberships.

Guenther
(This used to be commit 73ab2d2a74d3992167d9304dd41f60ad0805dd67)
2007-10-10 10:52:51 -05:00
Günther Deschner
4edd6528f9 r2752: Fix the paranoia-check to ensure the ldap-attribute and the
smb.conf-parameter for samba's "algorithmic rid base" in ldapsam are
identical.

It tried to get the value of LDAP_ATTR_ALGORITHMIC_RID_BASE via
get_userattr_key2string() for a very long time now. This just can not
work because LDAP_ATTR_ALGORITHMIC_RID_BASE is neither in attrib_map_v22
nor in attrib_map_v30. Instead, get it directly from dominfo_attr_list.

Ldapsam will now correctly refuse to initialize when admins tried
manually to have differing values for "algorithmic rid base" in ldap and
smb.conf. idmap_ldap is another story...

Guenther
(This used to be commit c5b8bc6c2e9a3f789f41742438b31152721c0bf4)
2007-10-10 10:52:50 -05:00
Günther Deschner
676aa559fe r2746: Fix typos in net's usage-output.
Guenther
(This used to be commit 4886d6663d7479978e2c395602392accb5939fa0)
2007-10-10 10:52:50 -05:00
Tim Potter
8ffb8bf944 r2736: Fix bug in Python printerdata wraper found by Daniel Jarboe.
(This used to be commit 8ec28d613d6dcade135b314c6764fbafcc8ed79c)
2007-10-10 10:52:50 -05:00
Günther Deschner
11c15472f8 r2732: Fixed typo.
Guenther
(This used to be commit 8521891ee87551e62fedecef2f5efa49f6c90a99)
2007-10-10 10:52:50 -05:00
Volker Lendecke
61918e78b7 r2729: Fix ldapsam_compat homeDrive. Thanks to jason@env.leeds.ac.uk
Volker
(This used to be commit ef057e9534cc3713d3bcd7427cf34c74f7e3ea13)
2007-10-10 10:52:50 -05:00
Günther Deschner
429dc212fb r2715: Swat-i18n-Patch from Björn Jacke <bjacke@sernet.de>:
"Unify charset-handling in Content-Type:-headers to UTF-8 (fixes #1766),
making UTF-8 the only supported (but fully functional) charset.  Also
remove html-header-files for ja and tr that have become obsolete now.
Reformat msgstr in msg-files to UTF-8."

Guenther
(This used to be commit 0f8e1a0d0083ffb25b1888f5cae2613f7a7dbc46)
2007-10-10 10:52:50 -05:00
Jeremy Allison
39efdab4c1 r2708: Don't look for bzero, we don't use it.
Samba4 torture tester treates maxentries = 0 as maxentries ==1.
Jeremy.
(This used to be commit 38f3d3e263f59f94f243907447b5a82f67d3e3f7)
2007-10-10 10:52:49 -05:00
Christopher R. Hertel
4a96fb5d12 r2706: The code that prints the remote MAC address (from the statistics section
of the response packet) was outside of the if() that determined whether
the query was successful or not.  As a result, the MAC address would print
out even if there was no MAC address.  At least the garbage it printed was
relatively consistent.  :)

I moved the MAC printing into the if() block and added an 'else' to print
"No reply..." if the query fails.

Chris -)-----
(This used to be commit 2a5d66791fa5e1b19e0ec9072af254142245d0c2)
2007-10-10 10:52:49 -05:00
Jeremy Allison
521268be1c r2703: Fix typo noticed by Igor Belyi <sambauser@katehok.ac93.org>
Jeremy.
(This used to be commit ba69c7229c27e917a24e6d608d59e7c0bdd47551)
2007-10-10 10:52:49 -05:00
Jeremy Allison
8df096a75e r2700: Fix bug where we could incorrectly set sparse attribute. Don't use
st_blksize, it isn't what you think....
Jeremy.
--his line, and those below, will be ignored--

M    source/smbd/dosmode.c
(This used to be commit 0a40c1a50f0e4b1b7efc9a53d22ceac14841bccf)
2007-10-10 10:52:49 -05:00
Jim McDonough
2d5bf9ec40 r2697: Fix for bugzilla #1732, patch by Satoh Fumiyasu, fumiya@samba.gr.jp
Limit share names returned by RAP based on windows character width, not unix
character width.
(This used to be commit 5d57058d912a42d55879352e904f0bcaa6531075)
2007-10-10 10:52:49 -05:00
Volker Lendecke
cc146adb26 r2691: Increase a debug level for a quite frequent operation.
Optimization for 'idmap backend = ldap': When asking sid2id for the wrong
type, don't ask ldap when we have the opposite mapping in the local tdb.

Volker
(This used to be commit c91cff3bd38c1a8e23628b032f09829f9abf792d)
2007-10-10 10:52:49 -05:00
Jeremy Allison
f128aa2a55 r2665: Ensure the UNIX info level returned enough data.
Jeremy.
(This used to be commit 8a7741dddf17dca136144fb26e2d7a42d313467a)
2007-10-10 10:52:49 -05:00
Jeremy Allison
eb9a09954b r2651: Added 'stat' command to smbclient to exercise the UNIX_FILE_BASIC
info level. Outputs data on the file in the same format the the
stat command in Linux. Should be useful to people wanting to learn
how to parse the UNIX extension output.
Yes I will add the docs later :-).
Jeremy.
(This used to be commit b25cc596417d29815814c3968ac2627bf59ffc0b)
2007-10-10 10:52:48 -05:00