Andrew Bartlett
8f1cec5faf
s3:smbd Fix segfault if register_existing_vuid() fails
...
The register_existing_vuid() call will handle both the ntlmssp_end and
vuid invalidation internally, so we don't want to do it again.
Andrew Bartlett
2010-06-07 23:34:28 +10:00
Andrew Bartlett
fc956cfcbb
s3:auth Rename user_info->domain -> user_info->mapped.domain_name
...
This is closer to the structure I want for a common struct
auth_usersupplied_info.
Andrew Bartlett
2010-06-07 23:34:28 +10:00
Andrew Bartlett
deabae191b
s3:auth Rename user_info->client_domain -> user_info->client.domain_name
...
This is closer to the structure I want for a common struct
auth_usersupplied_info.
Andrew Bartlett
2010-06-07 23:34:28 +10:00
Andrew Bartlett
e21935fc74
s3:auth fix header comment for internal_username -> mapped.account_name
2010-06-07 23:34:28 +10:00
Andrew Bartlett
7a021df96d
s3:auth Rename user_info->internal_username -> user_info->mapped.account_name
...
This is closer to the structure I want for a common struct
auth_usersupplied_info.
Andrew Bartlett
2010-06-07 23:34:28 +10:00
Andrew Bartlett
23159453d3
s3:auth Rename user_info->smb_name -> user_info->client.account_name
...
This is closer to the structure I want for a common struct
auth_usersupplied_info.
Andrew Bartlett
2010-06-07 23:34:28 +10:00
Simo Sorce
00089fd74a
s3:auth make sure the primary group sid is usable
...
This function was previously performed under the cover by converting
back and forth from info3 to samu and then later from samu to info3.
Since we now shortcircuit that in some cases, check explicitly using
get_primary_group_sid()
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:08 +10:00
Simo Sorce
048575defb
s3:auth return the full passwd struct from check_account
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:08 +10:00
Simo Sorce
0a7ff14617
s3:passdb Export function to calculate the proper primary group sid
...
Don't keep it buried in passdb, this function need to be available
for use in places where we do not want to construct an artificial
samu struct just to play tricks.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:08 +10:00
Simo Sorce
aaf45cd48e
s3:auth remove unused structure member
...
sids are now completely handled using info3, remove dead code that fills
server info sids and the structure members themselves
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:07 +10:00
Simo Sorce
aa1a3cbad2
s3:auth create nt token from info3 directly
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:07 +10:00
Simo Sorce
e6456df148
s3:auth handle unix domain sids in samu
...
When we generate a user out of thin air we may end up adding sids
that are not part of the sam domain (unix domain sids).
Handle the case and preserve these sids as extra sids.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:07 +10:00
Simo Sorce
61823fb885
s3:auth set the resolved user sid in the fake sam account
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:07 +10:00
Simo Sorce
ef942172b9
s3:auth check the user is valid first
...
It makes no sense to go through all the hoops to build samu and
convert it to info3, just to discard them later if the user was
not valid.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:06 +10:00
Simo Sorce
1bb0afa662
s3:auth make sure we set the right username
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-07 22:53:06 +10:00
Andreas Schneider
04c7484cf9
s3-waf: Build rpc_server/srv_spoolss_util.c too.
...
Signed-off-by: Günther Deschner <gd@samba.org>
2010-06-07 13:45:56 +02:00
Günther Deschner
0604df52e3
s3-lsa: Fix static list of luids in our privileges implementation.
...
The high/low order changed while moving to LSA defines. Found by torture test.
Guenther
2010-06-07 12:58:46 +02:00
Günther Deschner
4591fdbc18
s3-privileges: use LUID defines from lsa IDL.
...
Guenther
2010-06-07 10:33:36 +02:00
Matthew McGillis
f769671780
Fix bug with incorrect flag values for inherited ace in some cases.
2010-06-07 10:19:18 +02:00
Jeremy Allison
62e0a744e2
Fix a long-standing bug with async io that would only be triggered by SMB2.
...
On normal or shutdown close, ensure we wait for any pending IO to
complete before returning. Implement a blocking aio_suspend inside
vfs_aio_fork.c. These changes pass make test when the aio_fork module
is used by default on the test shares.
Jeremy.
2010-06-04 21:00:24 -07:00
Björn Jacke
79ec886aa4
s3:build: add shared lib flag for HP-UX compiler
2010-06-05 02:15:29 +02:00
Björn Jacke
a973eb1968
s3: fix build on Heimdal based systems like NetBSD5
2010-06-05 02:15:29 +02:00
Günther Deschner
b3ebebd3b1
s3-rpcclient: allow to add access_mask in cmd_spoolss_open_printer_ex().
...
Guenther
2010-06-05 00:35:09 +02:00
Jeremy Allison
fb79a8d7f0
Oops. Forgot to re-initialize the aio_ex pointer from sival_ptr.
2010-06-04 13:49:38 -07:00
Jeremy Allison
b12409a480
wait_for_aio_completion() should return 0 on non-aio compiled case.
2010-06-04 11:41:57 -07:00
Jeremy Allison
be5133f1e0
Rename req -> smbreq.
2010-06-04 11:41:38 -07:00
Jeremy Allison
e0acee4919
Change smbd_aio_complete_mid() -> smbd_aio_complete_aio_ex(). Simplifies
...
the code and eliminates find_aio_ex().
Jeremy.
2010-06-04 11:30:46 -07:00
Andreas Schneider
15f64af8e3
s3-rpc: Create a file with all functions for a internal named pipe.
...
This makes it possible to use the samr rpc server in winbind without
linking in smbd.
Reviewed-by: Simo Sorce <idra@samba.org>
2010-06-04 12:12:50 -04:00
Andreas Schneider
3344adc340
s3-rpc: Seperate rpc_srv_register for plain connection.
...
This will make it possible to create plain rpc named pipe connnections.
Reviewed-by: Simo Sorce <idra@samba.org>
2010-06-04 12:12:43 -04:00
Andreas Schneider
9097bdddd0
s3-auth: Moved smbd user functions to a generic place.
...
Reviewed-by: Simo Sorce <idra@samba.org>
2010-06-04 12:12:37 -04:00
Andreas Schneider
fad86ddf55
s3-smbd: Remove unneeded dependency of map_username to globals.c.
...
Reviewed-by: Simo Sorce <idra@samba.org>
2010-06-04 12:12:08 -04:00
Günther Deschner
09daf63c93
s3-selftest: do not call main RPC-SPOOLSS testsuite.
...
The tests formerly available in there can now be accessed via
RPC-SPOOLSS-PRINTSERVER.
Guenther
2010-06-04 14:31:08 +02:00
Björn Jacke
e8576ef9f4
ѕ3:Makefile: use PIC instead of PIE flags for shared libs
...
otherwise shared lib builds are broken on some platforms
2010-06-04 00:57:38 +02:00
Jeremy Allison
a73b846802
Allow us to cope correctly with NT_STATUS_MORE_PROCESSING_REQUIRED when downgrading from krb5 to NTLMSSP over SMB2.
...
Jeremy.
2010-06-03 11:50:08 -07:00
Jeremy Allison
e47d77832b
Found by Guenther - fix up our fallback paths from krb5 to NTLMSSP when using SMB2.
...
Jeremy.
2010-06-03 11:18:11 -07:00
Günther Deschner
30a9ddccff
s3-spoolss: add and use spoolss_printerinfo2_to_setprinterinfo2().
...
This fixes some invalid typecasts.
Guenther
2010-06-03 16:32:49 +02:00
Volker Lendecke
12d1a3b0a5
s3: Fix the build of the nfsv4 acl code
2010-06-03 16:10:47 +02:00
Günther Deschner
614e010daa
s3: remove authdata.h
...
Guenther
2010-06-03 11:00:27 +02:00
Günther Deschner
4b342b73a6
s3-build: pure cosmetics, use better names for gen_ndr code pieces.
...
Guenther
2010-06-03 11:00:27 +02:00
Günther Deschner
84a8f0451d
s3-build: only include generated spoolss headers (not ndr headers).
...
Guenther
2010-06-03 11:00:27 +02:00
Günther Deschner
ce85181430
s3: remove rpc_secdes.h completely.
...
Guenther
2010-06-03 11:00:26 +02:00
Günther Deschner
b6a2cea74d
s3-security: use shared "Standard access rights.".
...
Guenther
2010-06-03 11:00:26 +02:00
Günther Deschner
102b0cfe62
security: move generic_mapping and standard_mapping to security.idl.
...
Guenther
2010-06-03 11:00:26 +02:00
Günther Deschner
b5c2af9447
s3-security: use shared "File Object specific access rights".
...
Guenther
2010-06-03 11:00:25 +02:00
Günther Deschner
37b978c343
s3-security: use shared "Generic access rights".
...
Guenther
2010-06-03 11:00:25 +02:00
Günther Deschner
2794d2ee7f
s3-security: use shared Security Access Masks Rights.
...
Guenther
2010-06-03 11:00:25 +02:00
Günther Deschner
5cf3b0bba4
s3-security: move ALL_SECURITY_INFORMATION to the only user.
...
Guenther
2010-06-03 11:00:25 +02:00
Günther Deschner
1bed5254d9
s3-security: remove duplicate Extra W2K flags.
...
Guenther
2010-06-03 11:00:24 +02:00
Günther Deschner
a75436e3ee
s3-security: use shared SECINFO_DACL define.
...
Guenther
2010-06-03 11:00:12 +02:00
Günther Deschner
e24a59f932
s3-security: use shared SECINFO_SACL define.
...
Guenther
2010-06-03 10:59:54 +02:00