1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00

713 Commits

Author SHA1 Message Date
Volker Lendecke
6f47ed234a r18449: Attempt to fix the build on non-linux platforms: Many of those don't have
strtoull. This is a copy of the stuff in samba4 libreplace, which is GPL. I
hope it is ok to copy&paste it into a GPL file. Tridge, we could also create a
replace_lpgl.c if needed.

Volker
(This used to be commit f8346687d950ed643e8fa7d0b1a9c27f2880cc85)
2007-10-10 11:51:42 -05:00
Gerald Carter
5693e6c599 r17798: Beginnings of a standalone libaddns library released under
the LGPL.   Original code by Krishna Ganugapati <krishnag@centeris.com>.
Additional work by me.

It's still got some warts, but non-secure updates do
currently work.  There are at least four things left to
really clean up.

1. Change the memory management to use talloc() rather than
   malloc() and cleanup the leaks.
2. Fix the error code reporting (see initial changes to
   dnserr.h)
3. Fix the secure updates
4. Define a public interface in addns.h
5. Move the code in libads/dns.c into the libaddns/ directory
   (and under the LGPL).

A few notes:

* Enable the new code by compiling with --with-dnsupdate
* Also adds the command 'net ads dns register'
* Requires -luuid (included in the e2fsprogs-devel package).
* Has only been tested on Linux platforms so there may be portability
  issues.
(This used to be commit 36f04674aeefd93c5a0408b8967dcd48b86fdbc1)
2007-10-10 11:38:48 -05:00
Jeremy Allison
b41e14abfd r17610: Added the ability for firefox to drive the winbindd
ntlm_auth module to allow it to use winbindd cached
credentials.The credentials are currently only stored
in a krb5 MIT environment - we need to add an option to
winbindd to allow passwords to be stored even in an NTLM-only
environment.
Patch from Robert O'Callahan, modified with some fixes
by me.
Jeremy.
(This used to be commit ae7cc298a113d8984557684bd6ad216cbb27cff3)
2007-10-10 11:38:43 -05:00
Volker Lendecke
81e501ad15 r17552: Attempt to fix tdb transactions on IRIX
(This used to be commit 4a7b06860cd2907eb0e0deb466a613529121b8b7)
2007-10-10 11:38:38 -05:00
Jeremy Allison
d42a96b3ec r17367: Reverting the ab code. Note I'm not saying this
code is wrong or bad or anything, just that it
needs to be discussed & reviewed on the samba-technical
list before we add a platform-specific NFSv4 mapping.
That way lies a lot of future pain :-).
Jeremy.
(This used to be commit 330899ec30ffceb798e3a8362d20e103e20b2897)
2007-10-10 11:38:29 -05:00
Alexander Bokovoy
fbd04d65c5 r17358: Re-add JFS2 NFS4 ACLs support, move readme for it into AIX-specific examples directory.
(This used to be commit c085355c323c65ee782516859eed8a76b53e6035)
2007-10-10 11:38:28 -05:00
Alexander Bokovoy
16bf23d973 r17354: Revert -r 17353 per Volker request while gpfs compatibility layer code will be released.
(This used to be commit 5b1db0151461af18d994359e86c649922fc6de65)
2007-10-10 11:38:27 -05:00
Alexander Bokovoy
4cf5769331 r17353: Add support for JFS2 NFS4/AIXC and GPFS acls based on NFSv4 ACLs.
(This used to be commit 72312cb2e255301f978455a559461ad83b13b6cb)
2007-10-10 11:38:27 -05:00
Volker Lendecke
aab62d24e1 r17184: Attempt to get rid of some warnings on HP/UX. Without _XOPEN_SOURCE_EXTENDED
#defined getsockopt uses an int* as socklen parameter.

Volker
(This used to be commit 0b78da62f7481c6b3d46eb2f1b586d20b0b10ca5)
2007-10-10 11:38:18 -05:00
Jim McDonough
ba72b0242e r17179: Merge the vl-posixacls tmp branch into mainline. It
modularizes our interface into the special posix API used on
the system. Without this patch the specific API flavor is
determined at compile time, something which severely limits
usability on systems with more than one file system. Our
first targets are AIX with its JFS and JFS2 APIs, at a later
stage also GPFS. But it's certainly not limited to IBM
stuff, this abstraction is also necessary for anything that
copes with NFSv4 ACLs. For this we will check in handling
very soon.

Major contributions can be found in the copyright notices as
well as the checkin log of the vl-posixacls branch. The
final merge to 3_0 post-3.0.23 was done by Peter Somogyi
<psomogyi@gamax.hu>
(This used to be commit ca0c73f281a2a65a988094a46bb3e46a94011a53)
2007-10-10 11:38:17 -05:00
Gerald Carter
5ac15bc63a r17147: Install fixes for libraries
(This used to be commit 72bac13f21bf2c71538e3b3bafa0fc447e1e8af8)
2007-10-10 11:38:16 -05:00
Volker Lendecke
0e2f7c0ea4 r17138: In preparation for the cluster merge, add an empty configure option :-)
Volker
(This used to be commit 906720649b4a6c9de9fb6e248e573d3e8fd00ead)
2007-10-10 11:38:14 -05:00
Gerald Carter
0ea9508d53 r17021: remove unsupported smbwrapper code
(This used to be commit 07c67fbfc0790169ee748c0e62da14c89d3add23)
2007-10-10 11:19:20 -05:00
Jeremy Allison
fbdcf2663b r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need
to do the upper layer directories but this is what
everyone is waiting for....

Jeremy.
(This used to be commit 9dafb7f48ca3e7af956b0a7d1720c2546fc4cfb8)
2007-10-10 11:19:14 -05:00
Volker Lendecke
48229b35d7 r16676: .o generates other warnings, use the Solaris trick with .po.o also for AIX.
Fix a configure.in output line

Volker
(This used to be commit 1a80266d77bb95edaa221c14652b2c6fa9932ab6)
2007-10-10 11:19:07 -05:00
James Peach
ae412ebe71 r16483: Turn off some useless MIPSPro warnings be default.
(This used to be commit a22bf28bcab6ef3c4addaf57fdeb2020625ead0e)
2007-10-10 11:18:56 -05:00
James Peach
d2864af2e7 r16482: Fix bugzilla 3801 by forcing MIPSPro warning 1035 to be an error.
(This used to be commit 2131ddd7a13f078be471d327c8d73300facf8def)
2007-10-10 11:18:56 -05:00
Gerald Carter
58edac3c27 r16478: small cleanup to make pam_winbind.so build and iniparser
include directory like other parts of the build files.
(This used to be commit 0fca41efde36d535a274b983e032c1def33f081e)
2007-10-10 11:18:56 -05:00
Volker Lendecke
0f14e3eb8d r16340: Commit Bjoern's fix for the AIX PIC suffix. 'make test' still does the first
tests, and vfstest is still able to load modules. Looks like this is ok :-)

Volker
(This used to be commit c08bfdf87a1368a5d6c9a58ddb8ba379d969941d)
2007-10-10 11:17:36 -05:00
Jeremy Allison
0eb9bd176e r16287: Use intptr_t to return an integer of an unknown type cast
to void *.
Jeremy.
(This used to be commit e24361ecddef8a48a42a356775b93ce5c4027fae)
2007-10-10 11:17:31 -05:00
Günther Deschner
e030a9e9dc r16268: Add TCP fallback for our implementation of the CHANGEPW kpasswd calls.
This patch is mainly based on the work of Todd Stecher
<tstecher@isilon.com> and has been reviewed by Jeremy.

I sucessfully tested and valgrinded it with MIT 1.4.3, 1.3.5, Heimdal
0.7.2 and 0.6.1rc3.

Guenther
(This used to be commit 535d03cbe8b021e9aa6d74b62d81b867c494c957)
2007-10-10 11:17:29 -05:00
James Peach
8882d08b6b r16111: Patch from Björn JACKE <samba@j3e.de>.
This fixes a problem where the clock definition for clock_gettime() is
present at compile time, but is not available on the running system. In
this case, we fall back to less-preferred clocks until we find one that
we can use.
(This used to be commit fc6ed6a1aa2225ccde04c4ecaf0777dc0de4f1cb)
2007-10-10 11:17:20 -05:00
James Peach
777c22b300 r16057: Coalesce the DMAPI configure tests into a single macro. Add
a more specific probe to try and eliminate old, incompatible
DMAPI implementations provided by IRIX 6.4 and AIX 4.3.
(This used to be commit aafd4db457ce8a60c628d54a3ace3b97c8885dca)
2007-10-10 11:17:18 -05:00
James Peach
5f8eb11651 r15928: When we search for clock_gettime, we might find it in librt, but librt
might pull in libpthread. This is quite bad, firstly because it can
cause oplock signals on Linux to go wonky, and secondly because merely
linking with pthreads can cause performance degradations due to implicit
locking requirements.

The solution is to only search for clock_gettime if --with-profiling-data
was specified. If we do end up searching for it, then we test whether
linking with librt pulled in libpthread, and we only allow the definition
for clock_gettime to succeed if libpthread was NOT linked in.

Problem reported by Thomas Bork and diagnosed by Volker Lendecke.
(This used to be commit 5712644fcc00939b9101b2e3143674d2cbdf1e12)
2007-10-10 11:17:13 -05:00
James Peach
dc64af1d2e r15654: Update our internal copy of popt to that distributed with the RPM 4.2
source code.
(This used to be commit 9559886a92b1fdd33d380bf0100dcddb12477ff2)
2007-10-10 11:17:05 -05:00
Günther Deschner
ae0939ee66 r15634: Prevent passwords of winbindd's list of credential caches from beeing
swapped to disc using mlock(). (patch was reviewed by Jeremy).

Guenther
(This used to be commit 206cdbb8e9a4a0900060d56510e58b85a2b8aec5)
2007-10-10 11:17:04 -05:00
Gerald Carter
8c76903efb r15550: make sure to pick up the -lresolv libs on systems without -lldap to pull it in
(This used to be commit 4f3a1c2c58a4087f3a2f72f471cbaf2bad5addfe)
2007-10-10 11:16:58 -05:00
Gerald Carter
18d5a26f74 r15549: removing rhosts and 'hosts equiv' authentication features
(This used to be commit d19dad88155f985f113c667b6bdad5a1b25eca18)
2007-10-10 11:16:58 -05:00
Gerald Carter
745e2490ae r15547: say goodbye to --with-ldapsam (although the ldapsam_compat passdb backend still exists
(This used to be commit 7d99e05ee8f60b2b4d18405dc8be6f9ff822c3ad)
2007-10-10 11:16:58 -05:00
James Peach
826614ed16 r15508: Use clock_gettime for profiling timstamps if it is available. Use
the fastest clock available on uniprocessors.
(This used to be commit d44862928206b524f826bd7c2997ab5353c0b6a0)
2007-10-10 11:16:55 -05:00
Gerald Carter
af086da4ec r15462: replace the use of OpenLDAP's ldap_domain2hostlist() for
locating AD DC's with out own DNS SRV queries.
Testing on Linux and Solaris.
(This used to be commit cf71f88a3cdcabf99c0798ef4cf8c978397a57eb)
2007-10-10 11:16:49 -05:00
James Peach
584ac985ec r15448: New autoconf macro to test for sysconf variables.
(This used to be commit a19d4f2bb4aa94ab40e371efbad9f17e38e3bbc4)
2007-10-10 11:16:46 -05:00
James Peach
4ab90ea08c r15424: Implement a "stacktrace" smbcontrol option using libunwind's remote
stack tracing support. This provides an easy way for users to provide
stack traces (hopefully it will be implemented on something other than
ia64).
(This used to be commit 0b5e07e12daa98095dae27e0a6d53fe8ec3f3700)
2007-10-10 11:16:42 -05:00
James Peach
7fbc91995e r15423: Correct comparison logic so that libunwind can be correctly detected.
(This used to be commit 918f56b6de6e1297a53d88050d78d87330f7ba44)
2007-10-10 11:16:42 -05:00
Tim Potter
11cadb6f47 r15289: Put references to $PICFLAGS in quotes. Fixes #3725.
(This used to be commit 2aad5e915c03ec932feb1bc9e1dae938fa3011a2)
2007-10-10 11:16:32 -05:00
Günther Deschner
351e749246 r15240: Correctly disallow unauthorized access when logging on with the
kerberized pam_winbind and workstation restrictions are in effect.

The krb5 AS-REQ needs to add the host netbios-name in the address-list.

We don't get the clear NT_STATUS_INVALID_WORKSTATION code back yet from
the edata of the KRB_ERROR but the login at least fails when the local
machine is not in the workstation list on the DC.

Guenther
(This used to be commit 8b2ba11508e2730aba074d7c095291fac2a62176)
2007-10-10 11:16:29 -05:00
Günther Deschner
1f19676903 r15080: As discussed with Jerry, remove the CAP_LIBS again (we don't need that
handling anymore when we remove $(LIBS) from pam_winbind again.

Also make sure to build our own copy of iniparser with -fPIC.

Guenther
(This used to be commit e32c4f6f6e090ca5babe9f131bbcb9babedcec05)
2007-10-10 11:16:21 -05:00
Gerald Carter
8aa8b0db84 r15074: Remove -lcap from pam_winbind (not needed)
Temporary linking fix for --with-included-iniparser
(gd will do a proper fix later).
(This used to be commit 7d5adcf3a7237d130efea6cc9f6e5d28e65e2e51)
2007-10-10 11:16:21 -05:00
Gerald Carter
8c9eb7631e r15053: fix portabilities issues between 32-bit winbind clients and a 64-bit winbindd server
(This used to be commit a95d11345e76948b147bbc1f29a05c978d99a47a)
2007-10-10 11:16:00 -05:00
James Peach
7a5ff0885d r15047: Add support for using libunwind to generate a backtrace. This is
primarily intended for ia64 systems where libunwind knows more about
the different ways of walking the stack that just about anything else.
(This used to be commit 256a19d722f360dac3c8e83f5bfac453fa70db96)
2007-10-10 11:16:00 -05:00
James Peach
a407405438 r15046: Fix bug #3490 reported by Jason Mader. Do not continue to check for LDAP
and AD requirements if --without-ldap and --without-ads have been given
to configure.
(This used to be commit 1d5e4830d33906da433655ecaf87300ed874b06f)
2007-10-10 11:15:59 -05:00
Günther Deschner
c8fabfbf19 r15043: Only build our copy of iniparser when the system doesn't have one.
Guenther
(This used to be commit 5ae22cf46b1077b8892a2941a2891fe7412f1b9f)
2007-10-10 11:15:59 -05:00
James Peach
4fa5559800 r14898: This change is an attempt to improve the quality of the information that
is produced when a process exits abnormally.

First, we coalesce the core dumping code so that we greatly improve our
odds of being able to produce a core file, even in the case of a memory
fault. I've removed duplicates of dump_core() and split it in two to
reduce the amount of work needed to actually do the dump.

Second, we refactor the exit_server code path to always log an explanation
and a stack trace. My goal is to always produce enough log information
for us to be able to explain any server exit, though there is a risk
that this could produce too much log information on a flaky network.

Finally, smbcontrol has gained a smbd fault injection operation to test
the changes above. This is only enabled for developer builds.
(This used to be commit 56bc02d64498eb3faf89f0c5452b9299daea8e95)
2007-10-10 11:15:53 -05:00
Jeremy Allison
1d3fd5201c r14746: Add the Samba4 replacements for opendir/readdir etc. to
Samba3 - with some 64-bit macro madness. Attempt to fix
the broken directory handling in the *BSD-of-the-month
club.
Jeremy.
(This used to be commit fd98427f64f4206c01f16f82fadf24f5863878db)
2007-10-10 11:15:45 -05:00
Volker Lendecke
e487835181 r14695: Patch from Björn Jacke:
- add DMAPI/XDSM support for AIX
- find JFS DMAPI libs on Linux when only they are available

Volker
(This used to be commit b6b72f8c6a03001ae75457c9e7a78e189bea5a3f)
2007-10-10 11:15:44 -05:00
James Peach
40d0707827 r14668: Set the FILE_STATUS_OFFLINE bit by observing the events a DMAPI-based
HSM is interested in. Tested on both IRIX and SLES9.
(This used to be commit 514a767c57f8194547e5b708ad2573ab9a0719c6)
2007-10-10 11:15:42 -05:00
Lars Müller
853ad11aaf r14659: Fix installpammodules for shells where a
for module in ; do ... ; done

leads to an error (true64, solaris 8).

We now use {,UN}INSTALL_PAM_MODULES to get replaced by configure.
Therfore we don't run into the {,un}installpammodules rule if no PAM
module is requested.

Thanks to Björn Jacke for pointing to this issue.
(This used to be commit 07a70f8f861235ba4037aacb9cc835b6d18f51c3)
2007-10-10 11:15:42 -05:00
Lars Müller
4ba096740f r14631: Add {,un}installpammodules rule and add it to the install rule.
Nothing happens if PAM_MODULES is empty which is our default.

The default destination dir is "${LIBDIR}/security".  It's possible to
overwrite the default with --with-pammodulesdir while calling configure.
(This used to be commit 7163c6860549378fa63907048c4eb34fe81835cc)
2007-10-10 11:15:40 -05:00
Lars Müller
49ba0a9e20 r14626: Only set libdir and mandir to the defaults if we haven't used --libdir
or --mandir to set them already.  Till now we overwrrote a setting made
with --libdir or --mandir.
(This used to be commit 94980a15be5eae2820c340d3d33b6c9df7053b24)
2007-10-10 11:15:40 -05:00
Stefan Metzmacher
b40e258870 r14624: - add timelimit.c
- add configure tests --with-selftest-prefix=/tmp/samba-test
  this is needed because the path name of unix socket can only be 108 chars long
- add configure test --with-smbtorture4-path=/home/foo/prefix/samba4/bin/smbtorture
  this will be used to run samba4's smbtorture inside samba3's make test later

metze
(This used to be commit d9df1853b947c70f747ea30a353162f2985ef250)
2007-10-10 11:15:39 -05:00