1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-08 05:57:51 +03:00

1278 Commits

Author SHA1 Message Date
Jeremy Allison
aba243ca08 Fixed nasty little bug found by Gerald where we were corrupting the mode
bits before checking if we should change them on non-acl systems.
Jeremy.
-
Jeremy Allison
0db8a61d71 Made "security XXX" masks apply to ACL set. By default they have no effect.
Removed "restrict acl with mask" - redundent.
Jeremy.
-
Tim Potter
88a7b2c3f8 More compiler warning fixes. -
Jeremy Allison
15584d30cd Patch from ackley@cs.unm.edu to clear server_fd/client_fd in root daemon to stop
%I getpeername() failure.
Jeremy.
-
Jeremy Allison
f100e091ab Fix for bad profile perms. Ensure r on files and rwx on directories.
Jeremy.
-
Gerald Carter
96d0e7c330 Patch from Simo:
o sed 's/pdb_clear_sam/pdb_free_sam/g'
  o add pdb_reset_sam()
  o password changing should be ok now as well.
-
Jeremy Allison
e881971503 Patch from David_Tiller@ccnotes.ccity.com finally applied now I've thought
about it to stop account lockouts with "security=server" mode. Sorry for
the delay David.
Jeremy.
-
Jean-François Micouleau
a4a4c02b12 Big cleanup of passdb and backends.
I did some basic tests but I have probably broken something. Notably the
password changing. So don't cry ;-)

	J.F.
-
Gerald Carter
d5d6f01aaf merge from 2.2 in password_ok() to ensure that we check the
return code from smb_pam_accountcheck()
-
Jeremy Allison
7792e32ba7 Fixed SHM_R/SHM_W warnings by moving sys/ipc.h and sys/shm.h into includes.h
and using autoconf tests.
Added "restrict acl with mask" parameter.
Jeremy.
-
Jeremy Allison
47b4d82536 Had to add a "pam password change" parameter (defaults to "off") and inlined
the pam password change code to ensure that existing and working password
chat scripts don't break with 2.2.1. PAM password changing has to be explicitly
requested.
Allowed wildcards in pam password change matching (matches password chat
script matching). Had to add const (sorry Tim :-) to ms_fnmatch() to
stop warnings. Don't worry - the const changes are isolated and don't
cause any other warnings :-).
Jeremy.
-
Jeremy Allison
1648ac64a7 Based on an original PAM patch by Andrew Bartlett, re-written by me to
remove global static PAM variables, and to tidy up the PAM internals code.
Now looks like the rest of Samba.
Still needs testing.
Jeremy.
-
Andrew Tridgell
c986a3c51e - fixed some compiler warnings
- fixed slprintf and vsprintf macros
-
Andrew Tridgell
c7aeb2254d - added test for vasprintf
- cleaned up GNUC printf attribute macros
- added enum handling in mkproto
- removed non-vararg code
- made slprintf and vslprintf just macros for snprintf and vsnprintf
- don't need slprintf code any more
-
Andrew Tridgell
338d5ca8ad use asprintf for hideunreadable option -
Jeremy Allison
1be60597cd rpcclient/rpcclient.c: Non-void return in void function.
smbd/sec_ctx.c: Fixed potential memory leak spotted by
Kenichi Okuyama@Tokyo Research Lab, IBM-Japan, Co.
utils/nmblookup.c: gcc warning on Solaris fix.
Jeremy.
-
Jeremy Allison
6fcb600dcd More debug %d -> %u issues.
Jeremy.
-
Jeremy Allison
a60ecb4e53 Tidy up args to DEBUG Statements - found by gcc on Solaris.
Jeremy.
-
Jeremy Allison
2fd5e0bf14 Fixes for problems in NFS server code from Michael Gerdts <Michael.Gerdts@usa.alcatel.com>.
Jeremy.
-
Jeremy Allison
b35ca2c6b1 Fix from matthew.hart@veritas.com - bad error return from linux_oplock_receive_message().
Jeremy.
-
Jeremy Allison
f02e67a096 Sync with default perm changes in 2.2.
Jeremy.
-
Jeremy Allison
43b69e5d6e Fixed memory leak in new session code.
Jeremy.
-
Jeremy Allison
d4b1c0be2e Added smb_ prefix to all Samba wrapper pam functions.
Fixed off by one bug using StrnCpy instead of strdup().
Jeremy.
-
Jeremy Allison
071c799f47 Commit of a modified version of Andrew Bartlett's patch that removes the
horrid utmp hostname parameter - now uses the client name instead.
Also tidies up some of the unencrypted password checking when PAM
is compiled in.
FIXME ! An pam_accountcheck() is being called even when smb encrypted
passwords are negotiated. Is this the correct thing to do when winbindd
is running ! This needs *SEVERE* testing....
Jeremy.
-
Jeremy Allison
1e09874467 Fixed compile bug when using --with-pam but not --with-utmp.
Jeremy.
-
Jean-François Micouleau
9513eb87c2 a missing string conversion.
J.F.
-
Andrew Tridgell
c0d4a1f5dd new files for head -
Andrew Tridgell
f52a5014ee merge from 2.2 -
Jeremy Allison
121b59669f Removed mktemp from HEAD - same as done in 2.2.
Jeremy.
-
Jeremy Allison
0d10113d01 Rememver to use VFS at all times... even in new user_can_read_file code :-).
Jeremy.
-
Andrew Tridgell
7b6cfe2430 hide unreadable patch from idra -
Jeremy Allison
362574c5a3 Finally got the semantics right (hurrah!).
Jeremy.
-
Jeremy Allison
6706e258e1 Correct fix for open readonly with truncate.
Jeremy.
-
Jeremy Allison
d9fdaae54e Fixed potential bug in "become_guest" pointed out by elrond. Get_Pwnam()
returns a pointer to changable storage so ensure we save the details and
don't use the pointer directly.
Jeremy.
-
Jeremy Allison
5baef56831 This little piece of insanity is inspired by the
fact that an NT client can open a file for O_RDONLY,
but set the create disposition to FILE_EXISTS_TRUNCATE.
If the client *can* write to the file, then it expects to
truncate the file, even though it is opening for readonly.
Quicken uses this stupid trick in backup file creation...
Thanks *greatly* to "David W. Chapman Jr." <dwcjr@inethouston.net>
for helping track this one down. It didn't bite us in 2.0.x
as we always opened files read-write in that release.
Jeremy.
-
Jeremy Allison
32397e5bc6 configure:
configure.in:
include/config.h.in:
include/profile.h:
smbd/vfs-wrap.c:
smbd/vfs.c:
Added fchmod and fchown to VFS (sorry Gerald - but we needed them anyway).
smbd/dosmode.c:
smbd/files.c:
printing/printfsp.c:
smbd/close.c:
smbd/open.c:
Fixed "dos filemode" correctly so there are no race conditions. Forces test
of open of file O_WRONLY before allowing fchmod as root. Afterwards, calls
standard close function that preserves POSIX locks due to POSIX-me-harder
braindamage. :-). Andrew please review this code.
Also - in removing the tmpdir param in smbrun an extra NULL parameter
was missed in each print_run_command() call (which is a varargs fn.).
Now fixed.
Jeremy.
-
Jeremy Allison
5870e6019b Michael Davidson <md@sco.COM> pointed out that acl_get_qualifier can potentially
return a malloced area so added sys_acl_free_qualifier() calls to all supported
ACL interfaces to code with this (only Linux needs actual free call).
Jeremy.
-
Jeremy Allison
192887fe72 Fixed potential file descriptor leak with MS-Access fix.
Jeremy.
-
Jeremy Allison
a1eb2752a8 Added fix from "Eric Boehm" <boehm@nortelnetworks.com> to try and set hard
limit before setting soft limit.
Jeremy.
-
Jeremy Allison
fc76681812 Merge of Andrew's changes in 2.2.
Jeremy.
-
Jeremy Allison
e7d59d6de8 As Andrew suggested, make smbrun return a fd for a deleted file which can then
be read.
Jeremy.
-
Jeremy Allison
9b32b8a8cf To stop people complaining about the mktemp call, move it into lib/util.c. Thanks
to Andrew for all this code. Fixed extra line in lib/sysacls.c that broke
XFS ACL code.
Jeremy.
-
Jeremy Allison
20b13bafdf Fix for core dump in security = share code with new share security db.
Jeremy.
-
Jeremy Allison
036b1a8b09 Added set/get SD's on shares. Check before tcon.
Jeremy.
-
Jeremy Allison
94747b4639 Got "medieval on our ass" about adding the -1 to slprintf.
Jeremy.
-
Jeremy Allison
f50ea32dd0 Fix from Ed Boraas for not core dumping when out of connection structs.
Jeremy.
-
Jeremy Allison
bd2fe239db Fix from "Romeril, Alan" <a.romeril@ic.ac.uk> to get his NFS quota code
to work on Solaris 2.6.
Jeremy.
-
Jeremy Allison
181d41572c Integrated solaris nfs quota code from Alan Romeril <a.romeril@ic.ac.uk>
Jeremy
-
Andrew Tridgell
8b0e3679a6 started converting some of the only-ascii code to use srvstr_*
added srvstr_push_ascii() and srvstr_pull_ascii() as convenience
routines to replace the current usage of strncpy() like fns
for packet pull/push. We need to do this in *lots* of places
in Samba in order to get our codepage handling right
-
Jeremy Allison
f952380c5d utils/torture.c: Added one more delete on close test.
smbd/notify_kernel.c: This code was wrong I believe. It was structured to only
return a changenotify event on being called from timeout processing (t != 0).
The kernel changenotify events should fire on *asynchronous* processing (EINTR
return from select caused by the realtime signal delivery) with t == 0.
Reported by Juergen Hasch (Hasch@t-online.de).
ANDREW PLEASE CHECK THIS !
Currently the hash style changenotify is done on async processing as well
as timeout processing. As this is expensive we may want to revisit doing this
and maybe set it to fire only on timeout processing.
Jeremy.
-