1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-30 13:18:05 +03:00
Commit Graph

1133 Commits

Author SHA1 Message Date
Volker Lendecke
a85e841188 Setting the credentials for the netsec netlogon pipe connect upon each
samlogon call certainly breaks the credential chain. Do it once during
the bind response.

Volker
(This used to be commit 616b6dd60f)
2003-04-22 11:25:21 +00:00
Andrew Bartlett
c2e997d6a7 Merge from 3.0 - try harder to get our real DNS domain name, and send this
to the client when it asks for our DNS name and forest name.

(needed for win2k to trust us as a trusted domain).

Andrew Bartlett
(This used to be commit 2a1015eb57)
2003-04-22 07:45:16 +00:00
Gerald Carter
9d16dac3d1 wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get the credentials from secrets.tdb
(This used to be commit cf6af44a24)
2003-04-22 03:16:18 +00:00
Jeremy Allison
8f25fd3d72 Fixes to make SCHANNEL work against a W2K DC. Still need to fix
multi-PDU encode/decode with SCHANNEL. Also need to test against WNT DC.
Jeremy.
(This used to be commit ec82e8e9f4)
2003-04-16 15:54:00 +00:00
Tim Potter
75913ec2a9 Typo in comment.
(This used to be commit 0a87d668a0)
2003-04-15 04:08:59 +00:00
Jelmer Vernooij
ee8e82822e Fix typos
(This used to be commit 7bd80376cc)
2003-04-14 20:35:46 +00:00
Gerald Carter
a056cd8845 * We must return 0x2 as the majorversion for nt4 to upload drivers
* fix bug found by clobber_region()
(This used to be commit ad2765bb5e)
2003-04-11 23:50:21 +00:00
Gerald Carter
70231290ea simple fix to hopefully speed up srv_spoolss_replyopenprinter().
Use the client address from the pipe->conn->client_address
instead of trying to resolve the name in the _spoolss_rffpcn()
request.  Should make us more robust as well when the clients
are not registered in DNS or WINS.
(This used to be commit 78b2c1be7d)
2003-04-11 20:32:54 +00:00
Tim Potter
065561932c A new RPC pipe! The \pipe\echo named pipe is for testing large RPC
requests and responses and is only compiled in when --enable-developer
is passed to configure.  It includes server and client side code for
generating and responding to functions on this pipe.  The functions are:

 - AddOne: add one to the uint32 argument and return ig
 - EchoData: echo back a variable sized char array to the caller
 - SourceData: request a variable sized char array
 - SinkData: send a variable sized char array and throw it away

There's a win32 implementation of the client and server in the
junkcode CVS repository in the rpcecho-win32 subdirectory.
(This used to be commit 4ccd34ef83)
2003-04-11 04:09:14 +00:00
Jeremy Allison
ac65d89070 Ensure we're not filtering our essential delete messages.
Added jobid debug when unpacking message.
Jeremy.
(This used to be commit 8bab6e3206)
2003-04-10 18:43:00 +00:00
Volker Lendecke
425797700b Put the core schannel functions to parse_prs.c. They are also used by
schannel clients.

Volker
(This used to be commit 41e92409e1)
2003-04-09 09:29:47 +00:00
Gerald Carter
1c2e2ba39e another forgotten merge sitting on my laptop from app_head; only stall open_printer when 2k client opens with admin privs & fix reply for ChangeId printer data reply
(This used to be commit c7c3d42cd5)
2003-04-09 06:02:56 +00:00
Gerald Carter
ff8d6da5a3 forgotten merge left on disk; remove extra SAFE_FREE()
(This used to be commit 4d42067cb8)
2003-04-09 04:38:56 +00:00
Volker Lendecke
02bb4e1b8a This is a merge of the NETLOGON schannel server code from Samba
TNG. Actually, it exists in the main Samba cvs tree in APPLIANCE_TNG
as I found out later :-)

It adds a new parameter: server schannel = yes/auto/no defaulting to
auto.

What does this mean to the user: No requireSignOrSeal registry patch
for XP anymore.

Many thanks for this code to Luke Leighton, Elrond and anybody else I
forgot to mention.

My next thing will be to see if this applies cleanly to 3_0.

Please test and comment!

Volker
(This used to be commit e1f953241e)
2003-04-04 15:21:04 +00:00
Simo Sorce
a557af96e9 THE Idmap patch :-)
includes a --with-idmap=no switch to disable idmap usage if you find
problems.

cosmetic fixes and param aliases to separate winbind from idamp roles.

A temporarily remote idmap winbind compatibility backend.
As I have time I will further change code to not call directly winbind
(partly done but not tested) and a specilized module will be built in place
for the current glue hack.

The patch has been tested locally in my limited time, the patch is simple and
clear and should not reserve problems, if any just disable it.

As usual, comments and fisex are welcome :-)

Simo.
(This used to be commit 0278132047)
2003-04-02 10:36:02 +00:00
Jeremy Allison
f6f96c2966 Subtle changes to message handling after ENUMJOBS.
Jeremy.
(This used to be commit 48f3bf0ea5)
2003-04-02 02:26:01 +00:00
Gerald Carter
c5ff693082 fix potential handle leak in _spoolss_open_printer_ex(); final fix for CR2102; reviewed by jra
(This used to be commit 3d37e1ece9)
2003-04-01 14:58:42 +00:00
Gerald Carter
b5733dd6ef fix potential smbd crash when we fail to alloacte a policy handle for a printer open; CR 2102 (reviewed by jreilly)
(This used to be commit a179c2cefb)
2003-03-31 17:39:21 +00:00
Gerald Carter
47f230b761 add a few error checks in EnumPrinterData()
(This used to be commit 453813ec6e)
2003-03-31 01:00:34 +00:00
Jelmer Vernooij
cdfe4b9b85 Fix two typos
(This used to be commit 898a246c16)
2003-03-24 19:53:02 +00:00
Jelmer Vernooij
f2c1d6895f Give error message when module doesn't seem to contain
pipe functions
(This used to be commit 4dd1679043)
2003-03-24 18:38:59 +00:00
Andrew Bartlett
677838b999 Give volker a hand, and let domain joins with existing user accounts work
a bit better.

This just sets the minimum possible attributes - if we are 'upgrading' an
LDAP based user account, the attributes will be there anyway.  This matches
NT pretty well to.

This also fixes some use of unitialised values in the desired_access checking.
(found by valgrind).

Andrew Bartlett
(This used to be commit 929213ff2a)
2003-03-21 13:28:06 +00:00
Jeremy Allison
c8eed69be0 lib/messages.c: Check return from chainlock before modifying message queue.
Apply the job returned limit across all requests for job queues.
Jeremy.
(This used to be commit dee1326a1d)
2003-03-20 00:51:41 +00:00
Jelmer Vernooij
47ea3a2bf2 Put in the new modules system. It's now used by passdb and rpc. I will
put a doc about it in dev-doc later today.
(This used to be commit af7bfee0c6)
2003-03-19 18:45:19 +00:00
Jeremy Allison
736c753841 Ensure dev in make_connection is const.
Jeremy.
(This used to be commit e8155fade6)
2003-03-18 23:51:18 +00:00
Andrew Bartlett
7b18c5d164 Make sure we mark the assumption of a fstring parameter for 'devicetype'
in the function prototype, and change callers to respect this.

Andrew Bartlett
(This used to be commit 9f3d3c3801)
2003-03-16 13:24:36 +00:00
Andrew Bartlett
04858cd702 Limit the number of SIDs that may be looked up, in line with existing code
for name->sid.
(This used to be commit 0ebccc0dbe)
2003-03-07 09:29:56 +00:00
Gerald Carter
03a4c1907f * always report ourselves as a Windows 2000 print server (even
without ADS support)
* add "MinorVersion" print server data key and comment on "OSVersion"
(This used to be commit 342734e3de)
2003-03-03 17:33:57 +00:00
Gerald Carter
21be9e7776 * CR1868: only send a change notify message if we have something
that changed that the client is monitoring.

* couple of comments abnout how we need to validate driver names
  on SetPrinter() and AddPrinter()

* up the debug level on some overly verbose dev mode parsing messages
(This used to be commit 7377d671e8)
2003-03-03 16:34:19 +00:00
Jeremy Allison
e2366787ae Added limit to number of jobs enumerated. Set to 0 (means no limit).
Yes I will add the docs....
Jeremy.
(This used to be commit 4a739d914b)
2003-03-01 02:39:14 +00:00
Gerald Carter
97e7d2ffae additional fix for CR 601
* distinguish WinXP from Win2k
  * add a 1/3 of a second delay in OpenPrinter
    in order to trigger a LAN/WAN optimization in
    2k clients.
(This used to be commit 96570699d1)
2003-02-27 21:21:02 +00:00
Gerald Carter
7c7d796b6d Progress on CR 601
cache the printer_info_2 with the open printer handle.
cache is invalidated on a mod_a_printer() call **on that smbd**.

Yes, this means that the window for admins to step on each other
from different clients just got larger, but since handles a generally
short lived this is probably ok.
(This used to be commit 33c7b75225)
2003-02-25 20:51:23 +00:00
Gerald Carter
3d730f89cf i patched the wrong branch! s/unistr2_to_dos/unistr2_to_ascii/
(This used to be commit 513fb2ddd8)
2003-02-21 20:00:46 +00:00
Gerald Carter
ab985b983f couple of merges from APP_HEAD
* performance optimization in enumprinterdataex() when keyname is empty
  * fix a few typos in comments
  * reload services after addprinter_command()

dump registry data in ascii when the key is REG_SZ or REG_MULTI_SZ
(This used to be commit fde6ef7cc6)
2003-02-21 17:08:43 +00:00
Tim Potter
9383d61f6c Fixed compiler warning.
(This used to be commit b3f9cf8c1c)
2003-02-21 04:47:24 +00:00
Jelmer Vernooij
8d8a8c9633 Make init_module() and thus smb_load_module() return an int.
modules/developer.c: init_module() should return an int
(This used to be commit 7f59703550)
2003-02-20 22:26:28 +00:00
Jelmer Vernooij
c536b88b2b Use the new modules stuff to load dynrpc modules. Basically this means:
- calling the initialization function in the module init_module() instead of rpc_pipe_init()
- calling smb_load_module() to do the dlopen(), dlsym() and init_module() calls

I'll merge this to 3.0, together with the smb_load_module() function.

Discussed with Anthony.
(This used to be commit 3757ed8df0)
2003-02-18 18:34:48 +00:00
Gerald Carter
336ae66c5a set the various DsSpooler keys that are linked to PRINTER_INFO_2 fields; CR 985
(This used to be commit 9a4b7a86fd)
2003-02-18 03:43:08 +00:00
Andrew Bartlett
cc0202884b This patch fixes one of my longest-standing pet hates with Samba :-).
When we look see if a user is in a list, and we try to 'expand' an @group, we
should lookup the user's own list of groups, rather than looking for all the
members of a group.

I'm sure this will fix some nasty performance issues, particularly on large
domains etc.  In particular, this avoids contacting winbind at all, if the
group is not a winbind group.

(This caused a deadlock on my winbind-on-PDC setup).

The groups list always includes the user's primary group, as per the
getgrouplist manpage, and my recent changes to our implementation.

Andrew Bartlett
(This used to be commit 9be21976f7)
2003-02-17 12:27:34 +00:00
Gerald Carter
a703d55cd7 * set PRINTER_ATTRIBUTE_RAW_ONLY; CR 1736
* never save a pointer to an automatic variable (they go away)
  implement a deep copy for SPOOLSS_NOTIFY_MSG to correct
  messages being sent that have junk for strings;
  fix in response to changes for CR 1504
(This used to be commit 043b9dff22)
2003-02-15 23:36:18 +00:00
Jeremy Allison
4cd6e31bd3 Ensure that only parse_prs.c access internal members of the prs_struct.
Needed to move to disk based i/o later.
Jeremy.
(This used to be commit 4c3ee228fc)
2003-02-14 23:04:03 +00:00
Jeremy Allison
db937d3965 Removed unused variable.
Jeremy.
(This used to be commit c9654c8ec7)
2003-02-13 19:42:50 +00:00
Jeremy Allison
f4092b90bf Merge JohnR's patch.
Removed extra copy of server name in the printername field (it was
mangling the the name to be \\server\\\server\printer ... yes, there
were 3 backslashes) reported by get & enum jobs level 2.
Jeremy.
(This used to be commit d079edf732)
2003-02-13 06:52:45 +00:00
Andrew Tridgell
faf30e69ae initial server side privileges implementation, using a tdb. This needs to be hooked into pdb, and we need some access control on changing privileges. That's next
(This used to be commit f4f1f84a6b)
2003-02-12 09:14:35 +00:00
Andrew Tridgell
8ddccd47c7 added server stubs for lsa_enum_acct_with_right
(This used to be commit aa2abacaf4)
2003-02-11 21:55:48 +00:00
Andrew Tridgell
b4776d89ea added the LSA privileges server backend stubs. Right now they just log
what was requested.
(This used to be commit 64ac6c2bcb)
2003-02-06 05:42:19 +00:00
Jeremy Allison
56060dcf9e Fixed type.
Jeremy.
(This used to be commit ae635bb6ec)
2003-02-05 22:09:32 +00:00
Andrew Bartlett
28e3e48431 Send the user's session key in the SAMLOGON reply, so that a member server can
use smb signing.

Andrew Bartlett
(This used to be commit 574e8a8ab7)
2003-02-02 05:10:26 +00:00
Gerald Carter
2bdcf68ab6 don't free() auto variables; fixes segfault when looking up RefusePasswordChange registry value
(This used to be commit d89b0bff44)
2003-01-21 03:42:38 +00:00
Gerald Carter
52b65f70ca strip any trailing \'s from reg key names in an open
(This used to be commit 03807cd564)
2003-01-19 05:04:20 +00:00