1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-12 21:58:10 +03:00

20038 Commits

Author SHA1 Message Date
Gerald Carter
8ee22eeab5 r17159: Bug 3920: Restore wnibind use default domain behavior for domain groups.
This break local users and 'winbind nested groups' on domain members.
Cannot be helped.

My plans is to move the default domain crud to the client code (pam and
nss libraries) in 3.0.24.
2007-10-10 11:38:17 -05:00
Gerald Carter
75054e984e r17158: Add two new options to 'net ads join'
* createupn=[host_upn@realm]
  * createcomputer=<ou path top to bottom> (this was previously
    the only arg)
2007-10-10 11:38:17 -05:00
Jeremy Allison
11bab9d579 r17152: Don't handle the delete pending here, await
reschedule.
Jeremy.
2007-10-10 11:38:16 -05:00
Gerald Carter
3fea233802 r17151: revert a few accidental commits to the Makefile 2007-10-10 11:38:16 -05:00
Gerald Carter
bbe11b7a95 r17150: MMC User & group plugins fixes:
* Make sure to lower case all usernames before
  calling the create, delete, or rename hooks.
* Preserve case for usernames in passdb
* Flush the getpwnam cache after renaming a user
* Add become/unbecome root block in _samr_delete_dom_user()
  when trying to verify the account's existence.
2007-10-10 11:38:16 -05:00
Gerald Carter
1a7e81a4a8 r17149: Fail the join if we cannot set any SPNs for the machine account.
Disable the one we created and whine.
2007-10-10 11:38:16 -05:00
Gerald Carter
859c51cf25 r17148: the wins service should not accept any controls so that a GUI can grey it out as not remotely manageable 2007-10-10 11:38:16 -05:00
Gerald Carter
72bac13f21 r17147: Install fixes for libraries 2007-10-10 11:38:16 -05:00
Gerald Carter
36d4970646 r17146: Starting to cleanout my local tree some
* add code to lookup NS records (in prep for later coe that
  does DNS updates as part of the net ads join)
2007-10-10 11:38:15 -05:00
Jeremy Allison
12490fafc7 r17142: Ensure we record the correct can_read/can_write
from the client requested access mask.
Jeremy.
2007-10-10 11:38:15 -05:00
Jeremy Allison
3bcd52a475 r17140: Get rid of the lock release/reacquire code ! Turns out
that create dispositions that cause O_TRUNC break
oplocks. This simplifies the code - although we have
to keep separate the client requested access mask and
the access mask we actually use to open the file.
Jeremy.
2007-10-10 11:38:15 -05:00
Volker Lendecke
906720649b r17138: In preparation for the cluster merge, add an empty configure option :-)
Volker
2007-10-10 11:38:14 -05:00
Volker Lendecke
3482bb1ef5 r17136: Fix alignment on lsaquery. This broke in particular level 6, where the client
tried to figure out which role we are.

Needs to go into 23a.

Thanks to Karolin for insisting and setting up the test case :-)

Volker
2007-10-10 11:38:14 -05:00
Volker Lendecke
40e2679811 r17134: Fix a debug message 2007-10-10 11:38:14 -05:00
Jeremy Allison
788aa15ea2 r17131: Optimisation - when doing a stat open don't open the
file unless we really have to (ie. O_CREAT and file
doesn't exist).
Jeremy.
2007-10-10 11:38:14 -05:00
Jeremy Allison
b3b5aec0ee r17130: Remove unneeded unlock call.
Jeremy.
2007-10-10 11:38:14 -05:00
Jeremy Allison
b7374835e6 r17128: Missed a logic error in my last patch. Ensure we deal with any
oplocks that were granted when we had released the lock. Fix
strange case where stat open grants a batch oplock on file
create, but grants no oplock on file open.
Jeremy.
2007-10-10 11:38:14 -05:00
Jeremy Allison
8171c4c404 r17125: Drastic problems require drastic solutions. There's
no way to get all the cases where kernel oplocks are
on and we can't open the file and get the correct
semantics (think about the open with truncate with
an attribute only open - we'd need a vfs change to
add the truncate(fname, len) call). So always drop
the share mode lock before doing any real fd opens and
then re-acquire it afterwards. We're already dealing
with the race in the create case, and we deal with
any other races in the same way. Volker, please
examine *carefully* :-). This should fix the problems
people reported with kernel oplocks being on.
Jeremy.
2007-10-10 11:38:13 -05:00
Andrew Tridgell
d7ec9f3cc0 r17124: fixed a bug which caused resolve_ads() to spin forever if one of the
DCs isn't resolvable in DNS. The fix is to leave that DC out of the
returned list of DCs. I think the original code intended that anyway,
just didn't quite get it right ('i' wasn't incremented in that code
path, so the loop didn't terminate)
2007-10-10 11:38:13 -05:00
Gerald Carter
bc03141429 r17123: Fix 32bit/64bit portability issues again.
NO NOT change the winbindd response or request structures
*unless* you test a 32bit wbinfo against a 64bit winbindd.
The structure sizes MUST be the same on 32bit and 64 bit
platforms.

The way to test is to build a 64bit version of Winbind as normal.
Then build a 32bit version using gcc -m32.  Now install the 64bit and
32bit versions of libnss_winbindd.so and launch the 64bit winbindd.
Make sure that the responses from both 32bit and 64bit versions
of wbinfo match.

If you don't understand the previous paragraph you don't need to
be changing nsswitch/winbindd_nss.h
2007-10-10 11:38:13 -05:00
Gerald Carter
c8b7952843 r17122: remove unused global var from idmap_ad 2007-10-10 11:38:13 -05:00
Jelmer Vernooij
cbe286ac11 r17121: Fix maintainer information for pdb_*sql.
This commit was made using Bazaar, using the Subversion support
(see http://bazaar-vcs.org/BzrSvn)
2007-10-10 11:38:13 -05:00
Volker Lendecke
8c7d6cab19 r17116: Jerry, I can't reach you right now, but r17110 broke the build.
Please check.

Volker
2007-10-10 11:38:13 -05:00
Gerald Carter
6c0a690f0a r17111: cleanup the idmap_ad initialization after review by gd 2007-10-10 11:38:13 -05:00
Gerald Carter
2c7448e43e r17110: revert a bad merge from the old trunk 2007-10-10 11:38:12 -05:00
Jeremy Allison
0451a170c9 r17108: Make the default timeout parameter for lock waiting
be lp_lock_spin(). lock spin count is no longer
used. I'll update the man pages.
Jeremy.
2007-10-10 11:38:12 -05:00
Jeremy Allison
98d8d9399b r17107: Make the 200 ms timeout value tunable in local.h...
Might need to be a parameter ?
Jeremy.
2007-10-10 11:38:12 -05:00
Jeremy Allison
b5aaff6659 r17106: Match Windows timing values on locks.
Jeremy.
2007-10-10 11:38:12 -05:00
Jeremy Allison
b81d6d1ae9 r17105: Fix the race Volker found - we had a non-locked
region between detecting a pending lock was needed
and when we added the blocking lock record. Make
sure that we hold the lock over all this period.
Removed the old code for doing blocking locks on
SMB requests that never block (the old SMBlock
and friends).
Discovered something interesting about the strange
NT_STATUS_FILE_LOCK_CONFLICT return. If we asked
for a lock with zero timeout, and we got an error
of NT_STATUS_FILE_LOCK_CONFLICT, treat it as though
it was a blocking lock with a timeout of 150 - 300ms.
This only happens when timeout is sent as zero and
can be seen quite clearly in ethereal. This is the
real replacement for old do_lock_spin() code.
Re-worked the blocking lock select timeout to correctly
use milliseconds instead of the old second level
resolution (far too coarse for this work).
Jeremy.
2007-10-10 11:38:12 -05:00
Günther Deschner
d73d0ec3d0 r17102: Fix segfault in libnss_wins [bugzilla #3937].
Guenther
2007-10-10 11:38:12 -05:00
Jeremy Allison
b21ca265a2 r17100: Ooops. Fix the build...
Jeremy.
2007-10-10 11:38:11 -05:00
Jeremy Allison
f1a9cf075b r17098: Samba3 now cleanly passes Samba4 RAW-LOCK torture
test. Phew - that was painful :-). But what it means
is that we now implement lock cancels and I can add
lock cancels into POSIX lock handling which will fix
the fast/slow system call issue with cifsfs !
Jeremy.
2007-10-10 11:38:11 -05:00
Volker Lendecke
220dd43330 r17097: Move share_access_check from rpc_server/srv_srvsvc_nt.c to lib/sharesec.c 2007-10-10 11:38:11 -05:00
Volker Lendecke
0a138888ad r17096: Simplify share_access_check a bit: It takes the sharename instead of the snum,
and the decision which token to use (conn or vuser) does not really belong
here, it is better done in the two places where this is called.

Volker
2007-10-10 11:38:11 -05:00
Volker Lendecke
bcb196d21e r17095: Activate RPC-SAMBA3-SHARESEC 2007-10-10 11:38:11 -05:00
Volker Lendecke
b87c495221 r17089: Fix a possible null dereference and some memleaks.
Jerry, please check.

Thanks,

Volker
2007-10-10 11:38:11 -05:00
Günther Deschner
d573e64781 r17086: Re-add ability to contact remote domain controllers with the "net ads"
toolset.

In 3.0.23 all those commands have been limited to the DC of our primary
domain. Also distinguish calls that may go to remote DCs (search, info,
lookup, etc.) from those that should only go to our primary domain
(join, leave, etc.).

Guenther
2007-10-10 11:38:10 -05:00
Jeremy Allison
58e5e270d2 r17080: Remove traces of the wrepld directory (now
deleted).
Jeremy.
2007-10-10 11:38:10 -05:00
Volker Lendecke
1d928f783a r17078: Ouch.... 2007-10-10 11:38:10 -05:00
Volker Lendecke
8c6088f2bd r17077: Activate RPC-SAMBA3-GETUSERNAME in the build farm 2007-10-10 11:38:10 -05:00
Volker Lendecke
03e9924f5c r17075: Even without talloc_steal you can still create memory problems.... ;-) 2007-10-10 11:38:10 -05:00
Volker Lendecke
5cfe482841 r17064: lsa_GetUserName needs to return the name for S-1-5-7 on an anonymous login.
Found that because I want to play around with setsharesecurity, for this I
need the "whoami" call figuring out the SID of the currently connected user.

Not activating this test yet until the build farm has picked up the new samba4
revision.

Volker
2007-10-10 11:38:10 -05:00
Simo Sorce
a77b18c781 r17063: Update debian-sarge for 3.0.23 2007-10-10 11:19:22 -05:00
Volker Lendecke
2e7afa9e19 r17060: Some c++ warnings 2007-10-10 11:19:22 -05:00
Volker Lendecke
c0d9114706 r17047: Fix a typo and a possible NULL dereference 2007-10-10 11:19:22 -05:00
Jeremy Allison
a8df1863bf r17046: Ensure we're using the right pointers ...
Jeremy.
2007-10-10 11:19:22 -05:00
Jeremy Allison
1201383e7a r17043: Fix memleak when processing CIFS POSIX lock/unlock
requests. Maybe the Linux kernel OOM killer will
be kinder to smbd now :-). Back to tdbtorture
tests on cifsfs.
Jeremy.
2007-10-10 11:19:21 -05:00
Jeremy Allison
43d24fbd41 r17041: Trying to track down a *big* memory leak in the new lock code.
Fix a small one first.... (easy to valgrind).
Jeremy
2007-10-10 11:19:21 -05:00
Volker Lendecke
c5e393d5ed r17039: Eliminate snum from enumshares and getshareinfo. Get rid of some pstrings.
Volker
2007-10-10 11:19:21 -05:00
Volker Lendecke
6e98f8d6c6 r17033: Restructure init_srv_share_info_ctr so that there's only one loop, not a dozen
or so. Next step will be to eliminate the explicit snum reference.

Volker
2007-10-10 11:19:21 -05:00