1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-10 13:57:47 +03:00

54760 Commits

Author SHA1 Message Date
Jeremy Allison
9f0bdd4e17 Remove an unused talloc context.
Jeremy.
2009-07-16 18:12:17 -07:00
Andrew Bartlett
f6bed79ec6 Revert "s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version"
This is now handled correctly in the newly imported Heimdal

This reverts commit 4a754d029b0eb229b23980aa4a80dae2b485a302.
2009-07-17 08:39:51 +10:00
Andrew Bartlett
6cb81f7b37 s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52ee626327ee55b14ea0de8)
This includes in particular changes to the KDC to resolve bug 6272,
originally by Matthieu Patou <mat+Informatique.Samba@matws.net>.  We
need to sort the AuthorizationData elements to put the PAC first, or
else WinXP breaks when browsed from Win2k8.

Andrew Bartlett
2009-07-17 08:32:01 +10:00
Andrew Bartlett
19bc4ce95c s4:kdc Rework KDC to pull in less attributes for krbtgt lookups
Each attribute we request from LDB comes with a small cost, so don't
lookup any more than we must for the (very) frequent krbtgt lookup
case.  Similarly, we don't need to build a PAC for a server (as a
target), so don't ask for the PAC attributes here either.

Andrew Bartlett
2009-07-17 08:26:49 +10:00
Andrew Bartlett
d7b31ff853 s4:kdc rename functions from LDB_ to hdb_samba4
The LDB_ prefix is misleading, and stomps on the LDB namespace.  This
is a Samba4 hdb module, and not something generic.

Andrew Bartlett
2009-07-17 08:26:48 +10:00
Günther Deschner
2e77debc99 Revert "fix LSA-PRIVILEGES"
This reverts commit 0d9fdbceedddb08dbea8ed84e06a218d3ec562f4.
2009-07-17 00:13:54 +02:00
Günther Deschner
106d43a1dd Revert "fix LSA-TRUSTED-DOMAINS"
This reverts commit 3c9b26276083002124674678ac757e859fb6b20e.
2009-07-17 00:13:46 +02:00
Günther Deschner
8d68d04258 s4-smbtorture: use secinfo flags instead of numbers in lsa test.
Guenther
2009-07-17 00:13:40 +02:00
Günther Deschner
4faef0da76 s3-lsa: Fix pointless check for sec_info flags in _lsa_QuerySecurity().
Guenther
2009-07-17 00:13:29 +02:00
Günther Deschner
35e45fb841 s3-lsa: implement _lsa_LookupPrivName().
Guenther
2009-07-17 00:12:56 +02:00
Günther Deschner
3b899af422 s3-lsa: implement _lsa_EnumAccountsWithUserRight().
Guenther
2009-07-17 00:11:14 +02:00
Jeremy Allison
74c405db40 Tidyup prompted by #6554 - Wrong deallocation in sam_account_ok.
Jeremy.
2009-07-16 09:54:14 -07:00
Stefan Metzmacher
4a754d029b s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version
Otherwise heimdal/lib/gssapi/gssapi/gssapi.h will just define it to
__attribute__ ((deprecated)) which is not supported by all compilers
we care about.

This should fix the build on Tru64

metze
2009-07-16 12:24:47 +02:00
Stefan Metzmacher
98aba452fb s4:heimdal_build: try to fix the build on systems without ifaddrs.h
metze
2009-07-16 12:08:56 +02:00
Stefan Metzmacher
39684d2cbe tevent: try to fix the build on QNX qnx18 6.4.1 it doesn't have SA_RESTART defined
metze
2009-07-16 11:41:28 +02:00
Stefan Metzmacher
c9fe3256d8 s4:heimdal_build: tell heimdal we have inet_aton()
This should fix problems on Solaris.

metze
2009-07-16 11:41:27 +02:00
Günther Deschner
8cac8fd5d6 s4-smbtorture: use torture_comment in RPC-LSA tests.
Guenther
2009-07-16 11:13:26 +02:00
Günther Deschner
0d9fdbceed fix LSA-PRIVILEGES 2009-07-16 11:07:14 +02:00
Günther Deschner
3c9b262760 fix LSA-TRUSTED-DOMAINS 2009-07-16 11:07:06 +02:00
Günther Deschner
47eb061b53 s4-smbtorture: move all privilege tests to RPC-LSA-PRIVILEGES.
Guenther
2009-07-16 10:03:12 +02:00
Günther Deschner
29c3a277e1 s4-smbtorture: move all trusted domain tests to RPC-LSA-TRUSTED-DOMAINS.
Guenther
2009-07-16 10:03:12 +02:00
Stefan Metzmacher
3fa212af61 s4:heimdal_build: try to fix the build on Solaris
The problem seems to be #define flock rk_flock

heimdal/../heimdal_build/replace.c: In function `rk_flock':
heimdal/../heimdal_build/replace.c:64: error: storage size of 'lock' isn't known
heimdal/../heimdal_build/replace.c:64: warning: unused variable `lock'

metze
2009-07-16 08:51:51 +02:00
Stefan Metzmacher
1f12dc4409 tsocket: rename sa_len => sa_socklen, because sa_len is a macro on some platforms
metze
2009-07-16 08:21:08 +02:00
Andrew Bartlett
c901f57ce3 s4:kdc Initialise new hdb function pointers.
Soon we will add implementations for these.
2009-07-16 11:31:37 +10:00
Andrew Bartlett
e25325539a s4:heimdal: import lorikeet-heimdal-200907152325 (commit 2bef9cd5378c01e9c2a74d6221761883bd11a5c5) 2009-07-16 11:31:36 +10:00
Günther Deschner
05bec77e00 lsa: fix typo in lsa_TrustDomInfoEnum enum in IDL.
Guenther
2009-07-16 03:05:45 +02:00
Günther Deschner
2260cdbb53 s3-ldapsam: bring Fedora DS LDAP schema in line with OpenLDAP schema.
Guenther
2009-07-16 03:05:45 +02:00
Günther Deschner
f982c912f4 s3-rpc_parse: remove more unused code.
Guenther
2009-07-16 03:05:45 +02:00
Günther Deschner
33768fea07 s3-spoolss: make some of the command hooks static.
Guenther
2009-07-16 03:05:45 +02:00
Günther Deschner
c3f461c35f s4-smbtorture: some work on getprinterdriver and getprinterdriver2 tests.
Guenther
2009-07-16 03:05:44 +02:00
Andrew Bartlett
e16a2a1fa9 s4:gensec Rework gensec_krb5 mutual authentication defaults
When emulating Samba3 (which we do to ensure we don't break
compatability), don't do mutual authentication by default, as it
breaks the session key with AES and isn't what Samba3 does anyway.

Andrew Bartlett
2009-07-16 09:23:36 +10:00
Andrew Bartlett
84dca625ca s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIRED
We had previously assumed it was unconditional.  Samba3 didn't mind
very much, but Samba4's samba3-like client did, and the behaviour
differed to Win2008 behaviour.

Andrew Bartlett
2009-07-16 09:23:35 +10:00
Andrew Bartlett
bc354fb1a6 s4:gensec Allow mutual auth to be turned off in 'fake_gssapi_krb5'
This allows the older 'like Samba3' GENSEC krb5 implementation to work
against Windows 2008.  I'm using this to track down interop issues in
this area.

Andrew Bartlett
2009-07-16 09:23:35 +10:00
Andrew Bartlett
271b5af92e s4:dsdb Handle dc/domain/forest functional levels properly
Rather than have the functional levels scattered in 4 different,
unconnected locations, the provision script now sets it, and the
rootdse module maintains it's copy only as a cached view onto the
original values.

We also use the functional level to determine if we should store AES
Kerberos keys.

Andrew Bartlett
2009-07-16 09:23:35 +10:00
Andrew Bartlett
ba58edd0bc Add a way to set an opaque integer onto a samdb
This will allow us to set some more flags into ldb during the provision.
2009-07-16 09:23:35 +10:00
Timur I. Bakeyev
d6c44a704e Add ad-schema/*.txt and utils to the installmisc.sh
Install other useful scripts from the setup/ directory, not only
provisioning ones.

Also install setup/ad-schema/*.txt files to the SETUPDIR. These are
necessary for 'provision' to work properly.
2009-07-16 09:23:35 +10:00
Jeremy Allison
48a0732147 Fix bug #6551 - win98 clients cannot connect after server upgrade to samba-3.4.0.
The values of vuid and tid were not being correctly updated in the struct smb_request
when passed to chain_reply inside sessionsetupX and tconX.
Jeremy.
2009-07-15 13:59:11 -07:00
Stefan Metzmacher
377a97579b s3:smbd: try to fix a compiler warning on i386 : left shift count >= width of type
metze
2009-07-15 21:04:06 +02:00
Stefan Metzmacher
2fca950d68 s3:libsmb: we need to include "includes.h" as first header to let code build on all platforms
This should fix the Tru64 build.

metze
2009-07-15 20:59:35 +02:00
Stefan Metzmacher
8447600d98 s3:tldap: fix the build - a void function should not return a value
metze
2009-07-15 20:59:34 +02:00
Jeremy Allison
1f5aec877f Make cli_unlock and cli_unlock64 async. Fix POSIX lock test.
Jeremy.
2009-07-15 11:49:33 -07:00
Stefan Metzmacher
b76ab511f7 s4:winbind: rename uint => uint32_t as uint isn't portable
metze
2009-07-15 20:47:07 +02:00
Stefan Metzmacher
722765213b s4:libnet: rename uint => uint32_t because uint is not portable
metze
2009-07-15 20:47:00 +02:00
Stefan Metzmacher
dea2e4690a s4:heimdal_build: try to fix the build on Solaris
We need the definition of 'struct flock'.

metze
2009-07-15 20:43:23 +02:00
Stefan Metzmacher
64ee4458cf s4:ntvfs/ipc: replace unnesessary talloc_reference() by a simple talloc_strdup()
metze
2009-07-15 19:58:34 +02:00
Stefan Metzmacher
5240b10eaa s3:ntvfs/posix: avoid unnesessary talloc_reference()
This caused the panics on the RAW-SETFILEINFO.RENAME test,
because we returned an empty strings.

The problem was:

ERROR: talloc_steal with references at ntvfs/posix/pvfs_setfileinfo.c:215
       reference at ntvfs/posix/pvfs_resolve.c:799

metze
2009-07-15 19:24:35 +02:00
Björn Jacke
382d5c8f5b s4:heimdal: teach heimdal we have (v)aѕprintf in libreplace 2009-07-15 18:40:57 +02:00
Björn Jacke
b08ca108ef ѕ4:heimdal: teach heimdal that we have strnlen via libreplcae 2009-07-15 18:32:58 +02:00
Björn Jacke
5236b3699d s3: make linking of rpcclient --as-needed safe 2009-07-15 17:38:40 +02:00
Peter Volkov
2df4550aae s3: make linking of cifs.upcall --as-needed safe
See http://www.gentoo.org/proj/en/qa/asneeded.xml for details.
2009-07-15 17:38:34 +02:00