sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
Code
82,498 Commits 60 Branches 1,145 Tags 452 MiB
8be652a675
Commit Graph

82498 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andrew Bartlett
8be652a675 docs: Update Roadmap 2012-09-04 09:31:49 +10:00
Andrew Bartlett
3f42619e80 docs: Remove merged-branches.txt 
We are now well past simply having two projects in once tree, and each
continued reference to 'samba3' and 'samba4' causes user confusion.

Andrew Bartlett
 2012-09-04 09:31:49 +10:00
Andrew Bartlett
00108282d0 docs: Remove docs for removed parameter 'display charset' 2012-09-04 09:31:49 +10:00
Andrew Bartlett
339fb7ef61 remove extra tab from Makefile 2012-09-04 09:31:49 +10:00
Andrew Bartlett
f9e8f08197 docs: Fix undocumented target to find smb.conf directives in the right place 
The manpages target needs to be reworked to know about waf.

Andrew Bartlett
 2012-09-04 09:31:49 +10:00
Andrew Bartlett
28499b0476 docs: Remove references to security=share and security=server from the smb.conf docs 2012-09-04 09:31:48 +10:00
Andrew Bartlett
4a52a3f48d docs: Remove docs for removed parameter 'parinoid server security' 2012-09-04 09:31:48 +10:00
Karolin Seeger
75484f4911 docs: Rename manpages-3 -> manpages. 
This change was suggested by Andrew Bartlett on the samba-technical mailing
list.

Karolin

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Sep  3 23:35:38 CEST 2012 on sn-devel-104
 2012-09-03 23:35:37 +02:00
Karolin Seeger
9c44e2e539 s4-docs: Remove empty s4 HOWTO Collection. 
This change was proposed by Andrew Bartlett on the samba-technical mailing list.

Karolin
 2012-09-03 21:05:22 +02:00
Andrew Bartlett
18c0d872d1 build: skip shipping the alpha13 provision in the release tarballs 
This test is important, but it is not important enough to include this volume of data
in every tarball.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Mon Sep  3 13:01:58 CEST 2012 on sn-devel-104
 2012-09-03 13:01:58 +02:00
Andrew Bartlett
2dd0e7141f s4-classicupgrade: Show more clearly what is wrong with the Adminstrator SID 2012-09-03 19:24:10 +10:00
Andrew Bartlett
3b3d7bb602 build: Only make bin/ if it does not exist 2012-09-03 19:24:10 +10:00
Andrew Bartlett
3ad9c52b14 selftest: skip tests if the tarball did not include the alpha13 provision 2012-09-03 19:24:10 +10:00
Björn Jacke
05f9829ab5 waf: add new quota header checks and sysquota_4B source file 
Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Sun Sep  2 23:21:22 CEST 2012 on sn-devel-104
 2012-09-02 23:21:22 +02:00
Björn Jacke
9dd0e1608e s3: remove some duplicate quota code 2012-09-02 21:44:54 +02:00
Björn Jacke
af5dcaa740 s3: adopt the new sysquotas_4B support for BSD 
most BSD systems have ufs/ufs/quota.h and they count the quota in blocks, not
bytes and have slightly different dqblk struct members.
 2012-09-02 20:58:58 +02:00
Björn Jacke
d392485919 s3: add sysquotas_4B support 
this is from James Peach's darwin patch, that exists since a couple of years
already.

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Sun Sep  2 01:00:41 CEST 2012 on sn-devel-104
 2012-09-02 01:00:40 +02:00
Volker Lendecke
d5f845c0d3 s3: Make an if statement a bit easier to read 
Fix indentation a bit

Signed-off-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Sat Sep  1 07:07:12 CEST 2012 on sn-devel-104
 2012-09-01 07:07:12 +02:00
Jeremy Allison
5e0365dfe8 Now SEC_RIGHTS_PRIV_RESTORE and SEC_RIGHTS_PRIV_BACKUP don't include any generic bits (they're used directly in the fileserver where the generic bits have already been mapped into file specific bits) we need to add the generic bits to the test when we have these privileges. 
Mark samba4.base.maximum_allowed knownfail until we implement NTCREATEX_OPTIONS_BACKUP_INTENT.
 2012-08-31 20:32:37 -07:00
Jeremy Allison
6550bc0d26 Rewrite torture_samba3_rpc_sharesec() to use a non-privileged user for share security descriptor testing. 2012-08-31 20:29:13 -07:00
Jeremy Allison
64e57a1770 Add a comment showing where to set log level in tests. 2012-08-31 20:29:13 -07:00
Jeremy Allison
46455642a7 Change the S3 fileserver over to se_file_access_check(). 
Don't set the priv_open_requested yet until the open-for-backup
request is correctly passed in.
 2012-08-31 20:29:13 -07:00
Jeremy Allison
2b89e1a20a Factor out privilege checking code into se_file_access_check() which takes a bool priv_open_requested parameter. 2012-08-31 20:29:13 -07:00
Jeremy Allison
69d925d110 SEC_RIGHTS_DIR_PRIV_BACKUP and SEC_RIGHTS_DIR_PRIV_RESTORE aren't used anywhere. Remove (can re-add if needed). 
Ensure the privilege rights are always specific rights, not generic.
By the time the privilege rights are examined, we've already mapped
from generic to specific in the access_mask.
 2012-08-31 20:29:13 -07:00
Andrew Bartlett
4d7dad1315 s4-dsdb: Remove unused variables 
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Sat Sep  1 05:10:47 CEST 2012 on sn-devel-104
 2012-09-01 05:10:47 +02:00
Andrew Bartlett
8557c692f6 s4-kdc: Improve grammer and clarity of password change failure messages. 
This can still be improved further, but avoid mentioning reasons that
clearly do not apply in this case.

Andrew Bartlett
 2012-09-01 03:33:21 +02:00
Volker Lendecke
f0a9180ae9 s3: Fix warnings in aio_fork.c 2012-09-01 03:33:21 +02:00
Volker Lendecke
2ffe69082e s3: Remove a shadowing variable declaration 2012-09-01 03:33:21 +02:00
Andrew Bartlett
01ade93c7c s4-dsdb: Remove unused tmp_ctx leaked onto long-term ldb_context 
This was found based on a log provided by Ricky Nance
<ricky.nance@weaubleau.k12.mo.us>.  Thanks Ricky!

Andrew Bartlett
 2012-09-01 03:33:20 +02:00
Kai Blin
c256566aa9 s4 dns: Store TKEYs in a ringbuffer 
This stops us from potentially being DoSed by tons of TKEYs

Autobuild-User(master): Kai Blin <kai@samba.org>
Autobuild-Date(master): Fri Aug 31 22:46:01 CEST 2012 on sn-devel-104
 2012-08-31 22:46:01 +02:00
David Disseldorp
e4505fc27b tdb: return unpack error on strdup failure 
Signed-off-by: Lars Müller <lars@samba.org>

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Fri Aug 31 21:05:21 CEST 2012 on sn-devel-104
 2012-08-31 21:05:21 +02:00
Volker Lendecke
85706c4e16 s3: Fix a few "warning: ISO C90 forbids mixed declarations and code" 
Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Fri Aug 31 19:24:47 CEST 2012 on sn-devel-104
 2012-08-31 19:24:47 +02:00
Christian Ambach
2eb606bfa9 s3:build fix autoconf build on RHEL5 
RHEL5 only has autoconf 2.59, so autogen.sh still needs to find autoconf-2.60.m4
somewhere, but it was removed with 5f58359

Autobuild-User(master): Christian Ambach <ambi@samba.org>
Autobuild-Date(master): Fri Aug 31 12:50:03 CEST 2012 on sn-devel-104
 2012-08-31 12:50:03 +02:00
Christof Schmitt
3dfd179638 s3:doc Fix name of timeout parameter in documentation 
The name is time_audit:timeout, not time_audit:audit_timeout.

Signed-off-by: Christian Ambach <ambi@samba.org>
 2012-08-31 11:10:14 +02:00
Christof Schmitt
424492a963 s3:dbwrap_ctdb: Add DB name and key to warning message 
When a operation takes too long, it is useful for debugging to know the
DB and the key.

Signed-off-by: Christian Ambach <ambi@samba.org>
 2012-08-31 11:10:14 +02:00
Kai Blin
7204dc9708 s4 dns: Negotiate GSSAPI-based TKEYs 
Autobuild-User(master): Kai Blin <kai@samba.org>
Autobuild-Date(master): Fri Aug 31 10:38:35 CEST 2012 on sn-devel-104
 2012-08-31 10:38:35 +02:00
Andrew Bartlett
d2c0387d66 s4-kdc: Give information on how long the password history is 
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Aug 31 08:06:17 CEST 2012 on sn-devel-104
 2012-08-31 08:06:17 +02:00
Andrew Bartlett
efec5a9299 s4-libnet: Fix memory leak of lsa_RefDomainList and lsa_String onto libnet_ctx 
These are only needed for as long as the call, and should be children of the
private context.

This was found based on a log provided by Ricky Nance
<ricky.nance@weaubleau.k12.mo.us>.  Thanks Ricky!

Andrew Bartlett
 2012-08-31 14:30:38 +10:00
Andrew Bartlett
a5d57a04c2 auth/credentials: Do not print passwords in a talloc memory dump 
The fact that a password was created here is enough information, so
overwrite with the function name and line.

Andrew Bartlett
 2012-08-31 14:30:38 +10:00
Andrew Bartlett
a3b67e5299 VERSION: Move on to beta9 
We home beta8 will be the last beta, but to avoid confusion and allow
more releases if required I won't mark it as rc1 until the actual
release candidate.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Aug 31 02:07:23 CEST 2012 on sn-devel-104
 2012-08-31 02:07:23 +02:00
Andrew Bartlett
524876aa51 VERSION: Mark as the beta8 release 2012-08-31 08:33:15 +10:00
Andrew Bartlett
757df37e70 WHATSNEW: prepare for 4.0 beta8 2012-08-31 08:31:45 +10:00
Jeremy Allison
4ff446636a The NTVFS server doesn't pass the SMB1 INHERITFLAGS test. 
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Thu Aug 30 21:38:02 CEST 2012 on sn-devel-104
 2012-08-30 21:38:02 +02:00
Jeremy Allison
7c4ae72851 Now ACL inheritance flags are working, add test_inheritance_flags() back into raw.acls to ensure we don't regress. 2012-08-30 11:01:30 -07:00
Jeremy Allison
da670e4830 With the inheritance ACL changes we now pass samba3.smb2.acls.INHERITFLAGS. 2012-08-30 10:08:50 -07:00
Jeremy Allison
cf29863c69 Fix bug #9124 - Samba fails to set "inherited" bit on inherited ACE's. 
Change se_create_child_secdesc() to handle inheritance correctly.
 2012-08-30 10:08:50 -07:00
Jeremy Allison
3d34406c7b Windows does canonicalization of inheritance bits. Do the same. 
We need to filter out the
SEC_DESC_DACL_AUTO_INHERITED|SEC_DESC_DACL_AUTO_INHERIT_REQ
bits. If both are set we store SEC_DESC_DACL_AUTO_INHERITED
as this alters whether SEC_ACE_FLAG_INHERITED_ACE is set
when an ACE is inherited. Otherwise we zero these bits out.
See:

http://social.msdn.microsoft.com/Forums/eu/os_fileservices/thread/11f77b68-731e-407d-b1b3-064750716531

for details.
 2012-08-30 10:08:50 -07:00
Jeremy Allison
795920cf4a Change the other two places where we set a security descriptor given by the client to got through set_sd(), 
the canonicalize sd function.
 2012-08-30 10:08:50 -07:00
Jeremy Allison
70ebf1da67 Re-add set_sd(), called from set_sd_blob(). Allows us to centralize all ACL canonicalization. 2012-08-30 10:08:50 -07:00
Jeremy Allison
8c84ecef89 Rename set_sd() to set_sd_blob() - this describes what it does. 2012-08-30 10:08:50 -07:00