sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-04 05:18:06 +03:00
Code
49,282 Commits 60 Branches 1,144 Tags 452 MiB
a8722a190b
Commit Graph

4378 Commits

Author SHA1 Message Date
Günther Deschner
bff20e14c3 kerberos: use KRB5_KT_KEY macro where appropriate. 
Guenther
(This used to be commit a042dffd71)
 2008-08-29 11:01:34 +02:00
Günther Deschner
87ea8f3fae kerberos: add KRB5_KT_KEY abstraction macro. 
Guenther
(This used to be commit be846d5383)
 2008-08-29 11:01:34 +02:00
Günther Deschner
0380fe9d82 kerberos: move the KRB5_KEY* macros to header file. 
Guenther
(This used to be commit c28fa17fff)
 2008-08-29 10:59:28 +02:00
Volker Lendecke
f294f51bf0 Remove cli_request_get() 
req->private_data==NULL at this point is definitely a bug.
(This used to be commit ce3dc9f616)
 2008-08-28 18:22:49 +02:00
Volker Lendecke
228a12681b Add async smbecho client support 
(This used to be commit c1d645fbe3)
 2008-08-28 18:16:00 +02:00
Volker Lendecke
bb0fc9cfce Add cli_request->recv_helper 
Necessary for requests with multiple replies
(This used to be commit cb2e338eb3)
 2008-08-28 18:15:59 +02:00
Volker Lendecke
b054f14111 Activate code to enable chained requests 
Add the CHAIN1 torture test
(This used to be commit 82992d74a9)
 2008-08-28 18:15:59 +02:00
Volker Lendecke
77d1b29e25 Move "struct cli_request" from client.h to async_smb.h 
Also add some comments
(This used to be commit 2ecc311f78)
 2008-08-28 17:53:37 +02:00
Volker Lendecke
128524930d Add cli_pull_reply 
Along the lines of cli_request_send this abstracts away the smb-level buffer
handling when parsing replies we got from the server.
(This used to be commit 253134d3aa)
 2008-08-28 17:53:37 +02:00
Volker Lendecke
2650207d4a Remove cli->event_ctx, pass it explicitly 
Storing the event_context as permanent state in struct cli_state creates more
complex code than necessary IMO.
(This used to be commit debb37f703)
 2008-08-28 17:53:37 +02:00
Volker Lendecke
de9fcfc795 Add async open&x 
(This used to be commit faf353edd6)
 2008-08-28 17:53:36 +02:00
Volker Lendecke
8f408a676e Add async cli_close 
(This used to be commit f84a2b5dbf)
 2008-08-28 17:53:36 +02:00
Volker Lendecke
58aa97c0d9 Refactoring: Add the routine cli_request_send() 
cli_request_send() is supposed to bundle all generic SMB-header handling. This
makes cli_request_new static to async_smb.c.
(This used to be commit 7e73dd4e76)
 2008-08-28 17:53:36 +02:00
Jeremy Allison
29af730964 Fix the wcache_invalidate_samlogon calls. 
Jeremy.
(This used to be commit 7c820899ed)
 2008-08-27 17:29:10 -07:00
Jeremy Allison
1cae2ac905 Add st_birthtime and friends for accurate create times on systems that support it (*BSD and MacOSX). 
Should have done this ages ago, sorry.
Jeremy.
(This used to be commit 4c3a955890)
 2008-08-27 15:06:14 -07:00
Simo Sorce
a1de4e988d Merge branch 'v3-devel' of ssh://git.samba.org/data/git/samba into v3-devel 
(This used to be commit e038f1cf9f)
 2008-08-26 18:56:49 -04:00
Jeremy Allison
79150da70b Here is a re-working of the winbindd 
reconnect code to cope with rebooting a DC. This
replaces the code I asked Volker to revert.
The logic is pretty simple. It adds a new parameter,
"winbind reconnect delay", set to 30 seconds by
default, which determines how long to wait between
connection attempts.
To avoid overwhelming the box with DC-probe
forked children, the code now keeps track of
the DC probe child per winbindd_domain struct
and only starts a new one if the existing one
has died.
I also added a little logic to make sure the
dc probe child always sends a message whatever
the reason for exit so we will always reschedule
another connect attempt.
Also added documentation.
Jeremy.
(This used to be commit 8027197635)
 2008-08-20 16:24:22 -07:00
Stefan Metzmacher
eb8dd6a811 smbd: fix the handling of create_options to pass RAW-OPEN 
Some of the bits generate INVALID_PARAMETER and some bits
are ignored when they come from a client, that's why we need
to use bits from the ignored range for our internal usage.

metze
(This used to be commit 7b4c8a4e39)
 2008-08-20 15:50:26 +02:00
Jeremy Allison
f23a6b7c93 Fix bug 5697 nmbd spins in reload_interfaces when only loopback has an IPv4 address 
reported by Ted Percival <ted@midg3t.net>.
Jeremy.
(This used to be commit ab06efccf3)
 2008-08-19 17:30:30 -07:00
Simo Sorce
5e7655fa27 Split lookup_name() and create a new functiong called 
lookup_domain_name(). This new function accept separated
strings for domain and name.
(This used to be commit 8594edf666)
 2008-08-17 19:54:41 -04:00
Michael Adam
25f31194e5 Add modules_path() to construct paths to files in MODULESDIR. 
Michael
(This used to be commit 5ef9da6f4f)
 2008-08-15 23:19:57 +02:00
Michael Adam
cc83d5b9f1 dynconfig: add support for MODULESDIR. 
Michael
(This used to be commit 34309f097f)
 2008-08-15 23:19:57 +02:00
Michael Adam
b39040cfe2 dynconfig: remove commented-out old stuff from dynconfig.c and dynconfig.h 
Michael
(This used to be commit 85a781fa02)
 2008-08-15 23:19:56 +02:00
Michael Adam
1d60a7d662 dynconfig: remove unused prototypes. 
set_dyn_STATEDIR, is_default_dyn_STATEDIR,
set_dyn_CACHEDIR, is_default_dyn_CACHEDIR
are neither used nor implemented.

Michael
(This used to be commit f30b70b2c3)
 2008-08-15 23:19:56 +02:00
Michael Adam
f2d7c593b5 proto.h: remove prototypes from dynconfig.c 
These are also in dynconfig.h and were originally added
by "make proto" by accident.

Michael
(This used to be commit 4fb69fe1ee)
 2008-08-15 23:19:55 +02:00
Michael Adam
4136ab3c98 Put prototypes of modules/vfs_irixacl.c to new modules/vfs_irixacl.h. 
Thereby (hopefully) fixing the potential build problems with IRIX acls.

Michael
(This used to be commit 61c201d416)
 2008-08-14 11:22:49 +02:00
Michael Adam
34294b31aa Put prototypes of modules/vfs_hpuxacl.c to new modules/vfs_hpuxacl.h. 
Thereby (hopefully) fixing the potential build problems with HPUX acls.

Michael
(This used to be commit 4f2a1de990)
 2008-08-14 11:22:48 +02:00
Michael Adam
1c72d476ec Put prototypes of modules/vfs_solarisacl.c to new modules/vfs_solarisacl.h. 
Thereby (hopefully) fixing the potential build problems with solaris acls.

Michael
(This used to be commit 8413c05afc)
 2008-08-14 11:22:48 +02:00
Michael Adam
14fd4ac3ea Put prototypes of modules/vfs_tru64acl.c to new modules/vfs_tru64acl.h. 
Thereby (hopefully) fixing the build with tru64 acls.

Michael
(This used to be commit 1ab64b6985)
 2008-08-14 11:22:48 +02:00
Michael Adam
7871fa0b69 Put prototypes of modules/vfs_posixacl.c into new modules/vfs_posixacl.h. 
Michael
(This used to be commit 876f679343)
 2008-08-14 11:22:48 +02:00
Michael Adam
805bd92973 smbd/conn: fix prototype change of conn_close_all() in proto.h. 
(Cleaning "ensure we exit with non-zero status on EOF on socket"
 after rebasing to v3-3-test which has no "make proto" anymore.)

Michael
(This used to be commit a958c6bf1e)
 2008-08-13 11:54:12 +02:00
Andrew Tridgell
0f41961e4f first cut at adding full transactions for ctdb to samba3 
(This used to be commit f91a3e0f7b)
 2008-08-13 11:54:08 +02:00
Ronnie Sahlberg
fb97047a84 Use transaction start/cancel for persistent writes to avoid leaving the database in an inconsistent state if we crash during the operation 
Signed-off-by: Ronnie Sahlberg <ronniesahlberg@gmail.com>
(This used to be commit 09329f1f91)
 2008-08-13 11:54:06 +02:00
Volker Lendecke
8d25729705 Fix prototypes 
(This used to be commit 8b9d127146)
 2008-08-12 11:28:29 +02:00
Volker Lendecke
340ab6a256 idmap rewrite 
(This used to be commit 30a180f2fc)
 2008-08-12 11:28:29 +02:00
Günther Deschner
050db35262 doserr: add WERR_MEMBER_IN_ALIAS. 
Guenther
(This used to be commit b62de0d194)
 2008-08-11 19:04:00 +02:00
Michael Adam
33e3e94e0c nmbd_packets: make queue_packet() public. 
Michael
(This used to be commit 363eb90ce8)
 2008-08-09 01:15:58 +02:00
Michael Adam
bf291c95bc loadparm: add two parameters "init logon delay hosts" and "init logon delay" 
"init logon delays hosts" takes a list of hosts names or addresses
or networks for which the initial SAMLOGON reply should be delayed
(so other DCs get preferred by XP workstations if there are any).
This option takes the same type of list as "hosts allow" does.

"init logon delay" allows one to configure the delay for the hosts
configured for delayed initial samlogon with "init logon delayed hosts".
The value is interpreted as milliseconds. The default value is 100.

This commit only introduces the parameters.
They will be activated in a subsequent commit.

Michael
(This used to be commit f7c1f85438)
 2008-08-09 01:15:58 +02:00
Michael Adam
e0fa472a3b lib/access: make list_match() public. 
Michael
(This used to be commit 742bedce41)
 2008-08-09 01:15:58 +02:00
Michael Adam
f07cfe3b68 lib/access: make client_match() public. 
Michael
(This used to be commit 1b2dec93b6)
 2008-08-09 01:15:57 +02:00
Volker Lendecke
b67def0a55 Add simple async wrappers around send, recv and connect 
To be used later :-)
(This used to be commit 0d161d336a)
 2008-08-08 18:30:57 +02:00
Jeremy Allison
617bf10c66 Fix bug #5675 with a varient of Tim Waugh's patch, 
as proposed by James Peach.
Jeremy.
(This used to be commit 5c27ad7583)
 2008-08-07 17:55:57 -07:00
Michael Adam
0db26805da dssync keytab: add support for keeping track of the up-to-date-ness vector. 
The startup operation should get the old up-to-date-ness vector from the backend
and the finish operation should store the new vector to the backend after replication.

This adds the change of the signatures of the operations ot the dssync_ops struct
and the implementation for the keytab ops. The up-to-date-ness vector is stored
under the principal constructed as UTDV/$naming_context_dn@$dns_domain_name.

The vector is still uninterpreted in libnet_dssync_process().
This will be the next step...

This code is essentially by Metze.

Michael
(This used to be commit 01318fb27a)
 2008-08-01 16:04:40 +02:00
Tim Prouty
097b27dbcc Enabled domain groups to be added to builtin groups at domain join time 
Previously this was done at token creation time if the Administrators and Users
builtins hadn't been created yet.  A major drawback to this approach is that if
a customer is joined to a domain and decides they want to join a different
domain, the domain groups from this new domain will not be added to the
builtins.

It would be ideal if these groups could be added exclusively at domain join
time, but we can't rely solely on that because there are cases where winbindd
must be running to allocate new gids for the builtins.  In the future if there
is a way to allocate gids for builtins without running winbindd, this code
can be removed from create_local_nt_token.

- Made create_builtin_users and create_builtin_administrators non-static so
they can be called from libnet
- Added a new function to libnet_join that will make a best effort to add
domain administrators and domain users to BUILTIN\Administrators and
BUILTIN\Users, respectively.  If the builtins don't exist yet, winbindd must be
running to allocate new gids, but if the builtins already exist, the domain
groups will be added even if winbindd is not running.  In the case of a
failure the error will be logged, but the join will not be failed.
- Plumbed libnet_join_add_dom_rids_to_builtins into the join post processing.
(This used to be commit e92faf5996)
 2008-07-30 14:06:36 -07:00
Günther Deschner
21a8177ed2 rpc_client: add init_samr_CryptPasswordEx and init_samr_CryptPassword. 
Guenther
(This used to be commit 87b6aac135)
 2008-07-30 16:42:23 +02:00
Volker Lendecke
49403ee82f Make create_conn_struct() public 
(This used to be commit e115e25822)
 2008-07-27 17:56:48 +02:00
Volker Lendecke
b3f04dd32f Save 128 byte (32-bit platform) or 256 byte (64-bit) per connection_struct 
This was just too easy not to use :-)
(This used to be commit a9922a2a36)
 2008-07-26 16:52:02 +02:00
Volker Lendecke
33cbe2f88c make read/write to internal pipes available externally 
(This used to be commit e11b5cb1e0)
 2008-07-26 13:20:10 +02:00
Volker Lendecke
a803f0a920 Refactoring: Make close_internal_rpc_pipe_hnd a talloc destructor 
(This used to be commit 10b47a0c2c)
 2008-07-26 13:20:10 +02:00
Volker Lendecke
1ee37bc9c3 Refactor make_internal_rpc_pipe_p: connection_struct is not needed 
(This used to be commit defcf0eecf)
 2008-07-26 13:20:10 +02:00
Volker Lendecke
bdf1747c98 Create doxygen comments for async_req.[ch] 
(This used to be commit 1dab45b16a)
 2008-07-26 12:59:41 +02:00
Volker Lendecke
042600cbac Make api_rpcTNP static to srv_pipe.c 
(This used to be commit 256c93a8b3)
 2008-07-26 11:25:24 +02:00
Volker Lendecke
20675473b9 YESS -- remove the PI_* pipe constants 
(This used to be commit 26a40f708a)
 2008-07-21 14:36:32 +02:00
Volker Lendecke
da6e4248ee Make idl: cli_do_rpc_ndr does not use pipe_idx anymore 
(This used to be commit ffd2ff5325)
 2008-07-21 14:36:31 +02:00
Volker Lendecke
a20c498310 Remove unused function rpccli_is_pipe_idx 
(This used to be commit 287ffc17a0)
 2008-07-21 14:36:31 +02:00
Volker Lendecke
86bb746406 Refactoring: CLI_DO_RPC_* uses interface instead of pipe_idx 
(This used to be commit 6d2209ba5d)
 2008-07-21 14:36:31 +02:00
Volker Lendecke
303f98af2f Remove now unused cli_get_pipe_name 
(This used to be commit ed4a447103)
 2008-07-21 14:36:30 +02:00
Volker Lendecke
346a8d1bdc Remove now unused cli_get_pipe_idx 
(This used to be commit e02a550527)
 2008-07-21 14:36:29 +02:00
Volker Lendecke
9664f24ecf Remove now unused cli_get_iface 
(This used to be commit 2e60701e8d)
 2008-07-21 14:36:28 +02:00
Volker Lendecke
798b56edae Refactoring: libnetapi_open_pipe takes an interface instead of pipe_idx 
(This used to be commit 726e56c72f)
 2008-07-21 14:36:27 +02:00
Volker Lendecke
55f84c05bd Refactoring: Change calling conventions for cli_rpc_pipe_open_krb5 
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit f2656e5c2e)
 2008-07-20 17:37:14 +02:00
Volker Lendecke
99526d391d Refactoring: Change calling conventions for cli_rpc_pipe_open_schannel 
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 1fcfca007f)
 2008-07-20 17:37:14 +02:00
Volker Lendecke
52ff49600e Refactoring: Change calling conventions for cli_rpc_pipe_open_ntlmssp_auth_schannel 
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit ff87127baf)
 2008-07-20 17:37:13 +02:00
Volker Lendecke
ba2cb35ca5 Refactoring: Change calling conventions for cli_rpc_pipe_open_schannel_with_key 
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 78e9c937ff)
 2008-07-20 17:37:13 +02:00
Volker Lendecke
b8fc15be95 Refactoring: Make get_schannel_session_key return NTSTATUS 
(This used to be commit a0793cc853)
 2008-07-20 17:37:12 +02:00
Volker Lendecke
e0be03d8d5 Refactoring: Change calling conventions for cli_rpc_pipe_open_ntlmssp 
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit a13f059955)
 2008-07-20 17:37:11 +02:00
Volker Lendecke
1335da2a7c Refactoring: Change calling conventions for cli_rpc_pipe_open_noauth 
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 9abc9dc4dc)
 2008-07-20 17:37:11 +02:00
Volker Lendecke
65dfc40a4a Store copies of the syntax ids in rpc_pipe_client 
(This used to be commit 848a3497e3)
 2008-07-20 17:06:21 +02:00
Volker Lendecke
66669bad43 Simplify pipe_names: we only do ndr_transfer_syntax anyway 
(This used to be commit b808403af5)
 2008-07-20 17:06:21 +02:00
Volker Lendecke
867b61d0a1 The PIPE_ pipename macros are only used in cli_pipe.c 
(This used to be commit 03f7af26f2)
 2008-07-19 21:07:14 +02:00
Volker Lendecke
2e7cb1a5cc Introduce is_known_pipename 
This scans the list of pipes registered via rpc_pipe_register_commands instead
of using static tables.
(This used to be commit 283e603998)
 2008-07-19 20:27:56 +02:00
Volker Lendecke
8e02cb17fe Ooops, GUID_equal was already around :-) 
(This used to be commit 9a0bc277f2)
 2008-07-19 19:50:36 +02:00
Günther Deschner
24f0f552de libads: add prototype for ads_connect_gc(). 
Guenther
(This used to be commit 0122e4941d)
 2008-07-18 16:42:47 +02:00
Volker Lendecke
bcb652451b Simplify the RPC servers: remove get_pipe_fns 
The per-server xxx_get_pipe_fns functions can go once all the RPC servers are
converted
(This used to be commit 6aa2391cbe)
 2008-07-18 15:04:05 +02:00
Günther Deschner
6a3b742db7 util: add policy_hnd_equal(). 
Guenther
(This used to be commit 6aca163e89)
 2008-07-17 10:32:03 +02:00
Volker Lendecke
e0f3ea2cbe In api_pipe_bind_req(), check for the iface id, not the pipe name 
This requires to store the rpc_interface in "struct rpc_table"
(This used to be commit 654f8de849)
 2008-07-16 23:19:48 +02:00
Volker Lendecke
e65ea7471e Add ndr_syntax_id_equal() 
(This used to be commit 5fc90908de)
 2008-07-16 23:19:48 +02:00
Andreas Schneider
43892abff6 The buf in the smbclient write function should be const. 
As we try to provide POSIX function, we should use const like all other
POSIX function.

Signed-off-by: Andreas Schneider <anschneider@suse.de>
Signed-off-by: Derrell Lipman <derrell.lipman@unwireduniverse.com>
(This used to be commit 36e5df5954)
 2008-07-16 10:41:43 -04:00
Derrell Lipman
db7bff1bab Merge branch 'v3-3-test' of ssh://git.samba.org/data/git/samba into v3-3-test 
(This used to be commit 11d74fc51c)
 2008-07-16 09:48:23 -04:00
Derrell Lipman
a49f6f17c6 Fix typos. 
libsmbclient doesn't have bool defined; rather it uses smbc_bool

Derrell
(This used to be commit e1ade80f46)
 2008-07-16 09:45:02 -04:00
Jeremy Allison
24eec914c0 Fix swat. Bug #5613. 
Jeremy
(This used to be commit 15920f8388)
 2008-07-15 14:37:48 -07:00
Michael Adam
dbac75b466 popt: add a popt_common_debuglevel set of options providing -d|--debuglevel 
Michael
(This used to be commit e7d08b6730)
 2008-07-15 13:03:24 +02:00
Simo Sorce
02e592486f Make again idmap_init static 
(This used to be commit e113b7c13f)
 2008-07-12 21:40:28 -04:00
Volker Lendecke
622d36aa41 Revert "Make idmap_init() static" 
This reverts commit c8d1bbfddc.
(This used to be commit 5cded3da00)
 2008-07-11 17:53:26 +02:00
Volker Lendecke
d670d0a09b Revert "Remove gencache_[un]lock_entry" 
This reverts commit 7a5a575ffe.
(This used to be commit 62e444dd50)
 2008-07-11 17:53:25 +02:00
Volker Lendecke
b6dcc24987 Revert "Convert idmap_cache to gencache" 
This reverts commit 0bf0434f22.
(This used to be commit cc53667773)
 2008-07-11 17:53:24 +02:00
Volker Lendecke
ebb2d70a60 Revert "Make use of ADD_TO_ARRAY" 
This reverts commit 81f334bd6d.
(This used to be commit d4d106776a)
 2008-07-11 17:53:24 +02:00
Derrell Lipman
31262a59bc [BUG 5580] Allow access to DFS shares via libsmbclient 
Brian Sheehan provided a nice patch intended for the 3.0 code base.  This
commit applies a similar patch for the 3.3 code base.  It adds a new public
function to libsmbclient -- smbc_set_credentials() -- that may be called from
the authentication callback when DFS referrals are in use.

Derrell
(This used to be commit 888f922bd0)
 2008-07-08 20:44:39 -04:00
Volker Lendecke
ca34287063 Make use of ADD_TO_ARRAY 
(This used to be commit 81f334bd6d)
 2008-07-05 12:19:13 +02:00
Volker Lendecke
0234276af8 Convert idmap_cache to gencache 
(This used to be commit 0bf0434f22)
 2008-07-05 12:19:13 +02:00
Volker Lendecke
352b5c1857 Remove gencache_[un]lock_entry 
Günther agreed that it might be unnecessary in dsgetdcname_cache_store() :-)
(This used to be commit 7a5a575ffe)
 2008-07-03 16:40:46 +02:00
Volker Lendecke
1999791b7c Make idmap_init() static 
This is called only from idmap_alloc_init, which feels kindof weird.

Digging deeper in the code...
(This used to be commit c8d1bbfddc)
 2008-07-02 13:34:09 +02:00
Darshan Purandare
065760ede0 MSG_DEBUG now forwarded to all the winbindd children by parent. 
smbcontrol winbindd debug level would only set the debug level of the
parent winbindd process and not the child processes. This patch adds
the functionality of broadcasting the debug message to all winbindd
children. Now the debug level message is propagated to all the winbindd
processes that includes parent and children.
(This used to be commit cfbcfc3ffe)
 2008-07-01 17:52:24 -07:00
Günther Deschner
16e44ee112 kerberos: allow to keep entries with old kvno's while creating keytab. 
Guenther
(This used to be commit 6194244bd9)
 2008-06-30 12:38:40 +02:00
Günther Deschner
52635c6f58 kerberos: rename smb_krb5_kt_add_entry to smb_krb5_kt_add_entry_ext. 
Guenther
(This used to be commit 48600a0019)
 2008-06-30 12:38:32 +02:00
Volker Lendecke
cf9665016f Let send_trans_reply work on only the inbuf 
It does not really need the whole smb_request
(This used to be commit d3facf4cbd)
 2008-06-28 10:38:51 +02:00
Volker Lendecke
5cd8a42720 Factor out create_outbuf, creating an outbuf just given an inbuf 
(This used to be commit 50427cbf63)
 2008-06-28 10:38:51 +02:00
Gerald W. Carter
9ff1ffcbee libads: Add API call to connect to a global catalog server. 
Extends ads_connect() to a new call ads_connect_gc() which connects on port
3268 rather than port 389.  Also makes ads_try_connect() static and
only used internally to ldap.c
(This used to be commit f4c37dbe2c)
 2008-06-27 10:26:11 -04:00
Karolin Seeger
e08943f8d8 Fix warnings on SuSE 9.0. 
The macros "[un]likely" are already defined on SuSE 9.0.
Patch from Volker.
(This used to be commit 30d181c924)
 2008-06-27 15:51:35 +02:00
Jeremy Allison
799252f635 Fix the non-LDAP, non-krb5 build, fix gcc -O3 warnings. 
Jeremy.
(This used to be commit 9e2ab30d3c)
 2008-06-26 19:46:18 -07:00
Volker Lendecke
c885ae01eb Remove current_user reference from printfsp.c 
(This used to be commit 510f45d01a)
 2008-06-26 13:13:23 +02:00
Volker Lendecke
a3c0be6325 Change print_access_check to take auth_serversupplied_info instead of current_user 
Reason: This is the main user of p->current_user which I would like to remove
(This used to be commit fd43059b3d)
 2008-06-26 13:13:23 +02:00
Volker Lendecke
aa02c3fcd5 Remove p->vuid 
The users can use p->server_info.

Now pipes_struct is decoupled from the SMB transport.
(This used to be commit d4cf5a1319)
 2008-06-26 13:13:23 +02:00
Volker Lendecke
747a580952 Now that we have p->server_info, use p->server_info->user_session_key 
(This used to be commit aefad64e3a)
 2008-06-26 13:13:23 +02:00
Volker Lendecke
d331624fdf Add server_info to pipes_struct 
(This used to be commit d621867bb8)
 2008-06-26 13:13:22 +02:00
Günther Deschner
5a4cf3dbf2 errors: add WERR_DS_DRA_BAD_NC and WERR_DS_DRA_BAD_DN. 
Guenther
(This used to be commit 2efe18f7c9)
 2008-06-26 10:24:02 +02:00
Günther Deschner
402733b518 rpc_client: add rpccli_samr_chgpasswd_user() call. 
Guenther
(This used to be commit 10fd2baa83)
 2008-06-25 23:58:50 +02:00
Günther Deschner
14d500c0e7 rename rpccli_samr_chgpasswd3 to rpccli_samr_chgpasswd_user3. 
Guenther
(This used to be commit b1209a039b)
 2008-06-25 23:58:50 +02:00
Günther Deschner
059293cbf4 rename rpccli_samr_chgpasswd_user to rpccli_samr_chgpasswd_user2. 
Guenther
(This used to be commit 5b4650d56c)
 2008-06-25 23:58:50 +02:00
Günther Deschner
92bd665aea rpc_client: let cli_get_session_key() return talloced session key. 
Thanks, Volker, for pointing this out.

Guenther
(This used to be commit b47899195e)
 2008-06-25 09:51:31 +02:00
Günther Deschner
07f06eec21 rpc_client: add cli_get_session_key(). 
Guenther
(This used to be commit 93b56755f7)
 2008-06-24 23:47:58 +02:00
Günther Deschner
9a5fc5b5d3 crypto: add decrypt_drsuapi_blob from samba4. 
Guenther
(This used to be commit 3b6352a60e)
 2008-06-24 23:44:20 +02:00
Günther Deschner
7b1f015675 libads: add ads_connect_user_creds() that won't overwrite given user creds. 
Guenther
(This used to be commit 026018c9f1)
 2008-06-24 23:37:49 +02:00
Günther Deschner
6b4b76c40e libads: add ADS_AUTH_USER_CREDS to avoid magic overwriting of usernames. 
Guenther
(This used to be commit b5aaf5aa0f)
 2008-06-24 23:37:40 +02:00
Günther Deschner
640a2972c5 kerberos: add smb_krb5_keytab_name(). 
Guenther
(This used to be commit c273ce8798)
 2008-06-24 23:34:17 +02:00
Günther Deschner
0ac8c5d49a kerberos: make smb_krb5_kt_add_entry public, allow to pass keys without salting them. 
Guenther
(This used to be commit 7c4da23be1)
 2008-06-24 23:34:05 +02:00
Volker Lendecke
9ff4001245 Remove "conn" from pipes_struct 
For spoolss, we need the client's IP address
(This used to be commit 64a4dfaa82)
 2008-06-24 10:31:36 +02:00
Günther Deschner
33000d77e4 time: move uint64s_nt_time_to_unix_abs() to lib/time.c 
Guenther
(This used to be commit 58f54f180f)
 2008-06-23 23:38:52 +02:00
Andreas Schneider
e5ac03b0ae Add documentation for kerberos support in libsmbclient. 
Signed-off-by: Andreas Schneider <anschneider@suse.de>
Signed-off-by: Derrell Lipman <derrell.lipman@unwireduniverse.com>
(This used to be commit fa803ce183)
 2008-06-23 15:36:38 -04:00
Volker Lendecke
13ebf889b3 Remove the "exists" parameter from create_msdfs_link 
Jeremy, setting "exists" to True in _dfs_Add prevented the initial creation of
a new symlink for me, because the SMB_VFS_UNLINK failed. This also exists in
3.2. I only check it into 3.3 as I would like you to look at it first.

Thanks,

Volker
(This used to be commit f58b098a41)
 2008-06-22 20:45:53 +02:00
Volker Lendecke
65f7457583 Fix a crash in _dfs_Enum 
(cherry picked from commit 4a99647629)
(This used to be commit 86cae83a7d)
 2008-06-22 13:08:47 +02:00
Volker Lendecke
df905a5d77 Make pipes_struct its own talloc ctx 
(This used to be commit 829b1ad469)
 2008-06-21 10:34:34 +02:00
Volker Lendecke
52664f62ba Remove current_user references from trans2.c 
This involved replacing the CHECK_NTQUOTA_HANDLE_OK macro by a function.
(This used to be commit 5595cdf837)
 2008-06-19 18:51:38 +02:00
Volker Lendecke
40f5eab5eb Wrap the unix token info in a unix_user_token in auth_serversupplied_info 
No functional change, this is a preparation for more current_user ref removal
(This used to be commit dcaedf345e)
 2008-06-19 18:51:37 +02:00
Volker Lendecke
e40b6e296a Remove the "current_user" arg from fsp_belongs_conn 
fsp_belongs_conn only used the vuid struct member anyway, and this is available
in the smb_request structure as well.
(This used to be commit 64e9372ab9)
 2008-06-19 18:51:37 +02:00
Volker Lendecke
49ca8efa91 Remove the "current_user" arg from check_fsp 
check_fsp only used the vuid struct member anyway, and this is available in the
smb_request structure as well.
(This used to be commit 8d364c4c33)
 2008-06-19 18:51:37 +02:00
Derrell Lipman
6398f945e8 Remove prototype of unimplemented smbc_chown() function. 
(This used to be commit 0e84e3bb80)
 2008-06-18 11:00:46 -04:00
Michael Adam
b172eb1d47 file_access: remove unneeded stat buf parameter from can_access_file_acl(). 
This is a security descriptor level function only.

Michael
(This used to be commit 5931540fa1)
 2008-06-17 23:58:49 +02:00
Günther Deschner
0447e6a0a7 libads: add ads_get_machine_kvno() to make ads_get_kvno() a bit more generic. 
Guenther
(This used to be commit cb7ace209c)
 2008-06-17 19:54:09 +02:00
Günther Deschner
fd288b4110 clikrb5: remove unrequired create_kerberos_key_from_string_direct() prototype. 
Guenther
(This used to be commit ec86852fc6)
 2008-06-17 19:51:52 +02:00
Volker Lendecke
9c1f5894a5 Add forgotten protoypes 
(This used to be commit dee60935d4)
 2008-06-15 18:46:10 +02:00
Volker Lendecke
d49de28f11 Remove the current_user reference from fake_file.c 
The current vuid is not only available there, it is also in the current
smb_request structure.
(This used to be commit c8fd5eef32)
 2008-06-15 13:37:53 +02:00
Volker Lendecke
de7e6e070a AIX build fixes from William Jojo -- thanks 
(cherry picked from commit cb91a47576)
(This used to be commit 90d7bc6da3)
 2008-06-12 13:17:44 +02:00
Christoph Zauner
8d15371de4 Fix typos. 
(This used to be commit b2390aa738)
 2008-06-12 09:25:07 +02:00
Kai Blin
4d9748e44d net: Move includes to net.h 
(This used to be commit 1943e2752d)
 2008-06-10 09:45:09 +02:00
Volker Lendecke
aeb9eb85eb Fix the compile on NetBSD -- readlink and read are macros there 
(cherry picked from commit 435b80a9a2)
(This used to be commit 055bb54fa6)
 2008-06-09 15:01:42 +02:00
Volker Lendecke
d1e0c7f0c1 Add STREAMINFO op to vfs_full_audit 
Fix Coverity ID 552 and 553
(This used to be commit c46e10d260)
 2008-06-07 09:04:03 +02:00
Volker Lendecke
e252b0504a Add prototype for delete_negative_conn_cache 
(This used to be commit 097446c3c8)
 2008-06-07 08:16:23 +02:00
Günther Deschner
d4c5a1d504 util_str: add talloc_asprintf_strlower_m(). 
Guenther
(This used to be commit 7f8b0b4d15)
 2008-06-04 01:35:43 +02:00
Günther Deschner
4f6ea219d6 build: fix the build (missing protoype for lp_ldap_connection_timeout()). 
Guenther
(This used to be commit 06b597213a)
 2008-06-03 20:41:29 +02:00
Björn Jacke
d8b234648c Add ldap connection timeout for OpenLDAP and Netscape LDAP libs. This can be controlled via the ldap connection timeout parameter. This fixes fallbacks to secondary LDAP servers in multi LDAP server setups like in #4544 
(This used to be commit 8e59a2fedc)
 2008-06-03 16:32:31 +02:00
Günther Deschner
39101acba5 errors: add more WERRORs. 
Guenther
(This used to be commit 973de861c9)
 2008-06-03 01:27:44 +02:00
Günther Deschner
ff7b8bcebf doserr: Add WERR_GROUP_EXISTS and WERR_SPECIAL_ACCOUNT. 
Guenther
(This used to be commit 058cf7001e)
 2008-06-03 01:27:40 +02:00
Jeremy Allison
d36434f312 Security fix for CVE-2008-1105: Boundary failure when parsing SMB responses 
can result in a buffer overrun.
Jeremy.
(This used to be commit 23b825e9d2)
 2008-05-28 09:31:42 -07:00
Günther Deschner
611072fc1c Fix Bug #5285. (libcap header mismatch) 
Can someone with gpfs available test this ? The only codepath using this
function is the modules/gpfs.c module. The fix resolves at least the build
issues Samba has with recent kernel / libcap versions by using the portable
cap_get_proc()/cap_set_proc() interface (instead of using capget/capset).

Guenther
(This used to be commit 1779551412)
 2008-05-28 13:22:52 +02:00
Michael Adam
af6e91e0b3 fix build: add missing prototype of msg_close_file() 
Michael
(This used to be commit 1a6f91755c)
 2008-05-28 01:10:54 +02:00
Michael Adam
22174515e1 fix the build after prototype change. 
Michael
(This used to be commit d96634d037)
 2008-05-28 01:10:54 +02:00
Günther Deschner
95d873ac1f build: Fix the build after prototype change. 
Guenther
(This used to be commit 68327e577d)
 2008-05-28 00:53:04 +02:00
Jeremy Allison
6811dc3fc2 Allow server manager to close open files selected by id. 
Jeremy.
(This used to be commit 7eeed8bb41)
 2008-05-27 11:25:46 -07:00
Günther Deschner
372a6c0360 doserr: add WERR_REVISION_MISMATCH. 
Guenther
(This used to be commit 017ad275e5)
 2008-05-27 11:01:30 +02:00
Michael Adam
6cebad5b67 Remove unused function is_trusted_domain_situation(). 
This combined check has been replaced by is_dc_trusted_domain_situation()
which does not check for lp_allow_trusted_domains().

Michael
(This used to be commit 0a24c038b7)
 2008-05-26 16:42:25 +02:00
Michael Adam
4de01a909a Add function is_dc_trusted_domain_situation(). 
This is like is_trusted_domain_situation() except that it does not
check for lp_allow_trusted_domains().

Michael
(This used to be commit a284c88435)
 2008-05-26 16:42:24 +02:00
Volker Lendecke
5b237b8d30 Move ber_[read|write]_OID_String protypes to proto.h 
(This used to be commit 2dbbd81677)
 2008-05-25 13:53:43 +02:00
Volker Lendecke
320fadd8fc Remove the reference to current_user_info from share_access.c 
This required to pass around the domain a bit
(This used to be commit 17b0db20d2)
 2008-05-25 11:43:57 +02:00
Günther Deschner
6b3bcb3724 drsuapi: add all code required for our drsuapi rpc client. 
Guenther
(This used to be commit 7c93190843)
 2008-05-23 23:56:21 +02:00
Gerald W. Carter
4d2f71e53f Manually merge Steven Danneman's patch for SPNEGO auth to a trusted 
Win2008 domain (merged from v3-0-test).

   commit 8dc4e97977
   Author: Steven Danneman <sdanneman@isilon.com>
   Date:   Wed May 7 13:34:26 2008 -0700

      spnego SPN fix when contacting trusted domains

      cli_session_setup_spnego() was not taking into consideration the situation
      where we're connecting to a trusted domain, specifically one (like W2K8)
      which doesn't return a SPN in the NegTokenInit.

      This caused two problems:

      1) When guessing the SPN using kerberos_get_default_realm_from_ccache() we
      were always using our default realm, not the realm of the domain we're
      connecting to.

      2) When falling back on NTLMSSP for authentication we were passing the name
      of the domain we're connecting to for use in our credentials when we should be
      passing our own workgroup name.

      The fix for both was to split the single "domain" parameter into
      "user_domain" and "dest_realm" parameters.  We use the "user_domain"
      parameter to pass into the NTLM call, and we used "dest_realm" to create an SPN
      if none was returned in the NegTokenInit2 packet.  If no "dest_realm" is
      provided we assume we're connecting to our own domain and use the credentials
      cache to build the SPN.

      Since we have a reasonable guess at the SPN, I removed the check that defaults
      us directly to NTLM when negHint is empty.
(This used to be commit b78b14c88e)
 2008-05-23 16:01:45 -05:00
Michael Adam
a8045b1339 rpc_client: make rpc_pipe_open_tcp_port and rpc_pipe_get_tcp_port static. 
Slim the interface...

Michael
(This used to be commit 9971118c23)
 2008-05-22 11:30:04 +02:00
Michael Adam
b398a96b09 rpc_client: use endpoint mapper to get the port for rpc_pipe_open_tcp(). 
Michael
(This used to be commit f7db445c82)
 2008-05-22 11:29:57 +02:00
Volker Lendecke
44fbd895e8 Compile endpoint mapper pidl output 
(This used to be commit fe8f9e427a)
 2008-05-21 23:35:26 +02:00
Volker Lendecke
e8d25443c1 Add client support for NCACN_UNIX_STREAM 
(This used to be commit 24ac40518f)
 2008-05-21 23:35:25 +02:00
Volker Lendecke
78022953e7 rpccli_schannel_bind_data only needs the schannel key 
(This used to be commit be5d54a363)
 2008-05-21 23:35:25 +02:00
Volker Lendecke
ec70996fc7 Rename rpc_pipe_client.tcp.sock to rpc_pipe_client.sock.fd 
(This used to be commit 2ff908a902)
 2008-05-21 23:35:24 +02:00
Tim Prouty
fb37f15600 Cleanup size_t return values in callers of convert_string_allocate 
This patch is the second iteration of an inside-out conversion to cleanup
functions in charcnv.c returning size_t == -1 to indicate failure.
(This used to be commit 6b189dabc5)
 2008-05-20 22:40:13 +02:00
Jeremy Allison
ce4145319e Remove conn_find_byname now it's no longer used in 
the msdfs.c code.
Jeremy
(This used to be commit 54556df561)
 2008-05-19 17:19:18 -07:00
Michael Adam
1ef69fcf21 build: freeze proto.h 
Michael
(This used to be commit ff7f0cad2e)
 2008-05-18 22:58:07 +02:00
Volker Lendecke
e58729f0ea Simplify fake_file logic 
(This used to be commit 93111ea0a1)
 2008-05-16 23:18:50 +02:00
Volker Lendecke
5bda9a8af0 Remove "user" from connection_struct 
(This used to be commit 368454a27c)
 2008-05-10 11:17:01 +02:00
Volker Lendecke
66835ba2b7 Add a comment explaining server_info in connection_struct 
(This used to be commit 35438a9407)
 2008-05-10 11:17:01 +02:00
Volker Lendecke
53a623d8a6 Remove the unix token info from connection_struct 
(This used to be commit 2834dacc8d)
 2008-05-10 11:17:01 +02:00
Volker Lendecke
776caa081b Replace nt_user_token with server_info in connection_struct 
(This used to be commit a3738aef59)
 2008-05-10 11:17:01 +02:00
Volker Lendecke
c881c866d6 Next try at making the vuid cache circular 
Jeremy, please check!
(This used to be commit a34f735217)
 2008-05-10 11:17:00 +02:00
Volker Lendecke
90995202c0 Add "server_info" to connection_struct 
This will replace all the user identity stuff in connection_struct, for now it
is just a source where the other fields in connection_struct are filled from.
(This used to be commit 0f53f9e7db)
 2008-05-10 11:17:00 +02:00
Volker Lendecke
f93e232535 Remove unused "force_group" from connection_struct 
(This used to be commit 03944f8d89)
 2008-05-10 11:17:00 +02:00
Kai Blin
f576910944 net: Remove globals 
(This used to be commit 1e9319cf88)
 2008-05-10 09:22:27 +02:00
Jeremy Allison
00b2cdf75e Yay ! Remove a VFS entry. Removed the set_nt_acl() call, 
this can only be done via fset_nt_acl() using an open
file/directory handle. I'd like to do the same with
get_nt_acl() but am concerned about efficiency
problems with "hide unreadable/hide unwritable" when
doing a directory listing (this would mean opening
every file in the dir on list).
Moving closer to rationalizing the ACL model and
maybe moving the POSIX calls into a posix_acl VFS
module rather than having them as first class citizens
of the VFS.
Jeremy.
(This used to be commit f487f742cb)
 2008-05-08 18:09:07 -07:00
Volker Lendecke
64ddd381b7 Rename server_info->was_mapped to server_info->nss_token 
"nss_token" from my point of view much better reflects what this flag actually
represents
(This used to be commit b121a5acb2)
 2008-05-07 14:47:29 +02:00
Jeremy Allison
4c2088b1c5 Merge branch 'v3-3-test' of ssh://jra@git.samba.org/data/git/samba into v3-3-test 
(This used to be commit bb8f098cdf)
 2008-05-05 16:29:21 -07:00
Jeremy Allison
fbc780b604 Try and fix bug #5095, "Manage Documents privilege is not functional". 
Should map the created sd to printer jobs, not printer.
Jerry please test and I'll add to 3.2 if it passes. Thanks,
Jeremy.
(This used to be commit 0a1fe8d601)
 2008-05-05 16:24:52 -07:00
Volker Lendecke
1723348150 Remove unused dir_status_struct 
(This used to be commit 425ca59cce)
 2008-05-05 22:53:09 +02:00
Volker Lendecke
bec1dfab27 Remove "userdom_struct user" from "struct user_struct" 
(This used to be commit 420de03523)
 2008-05-05 18:28:59 +02:00
Volker Lendecke
82d2f07dae Remove "session_key" from "struct user_struct" 
This one took a bit -- I hope I covered all data paths
(This used to be commit 74c88a4442)
 2008-05-05 18:28:59 +02:00
Volker Lendecke
71ff1ba2de Remove "guest" from "struct user_struct" 
(This used to be commit 570a6b80fe)
 2008-05-05 18:28:59 +02:00
Volker Lendecke
c6d209f834 Remove the unix token info from "struct user_struct" 
(This used to be commit aa2299d42a)
 2008-05-05 18:28:58 +02:00
Volker Lendecke
bb3755968f Remove "nt_user_token" from "struct user_struct" 
(This used to be commit 51d5d512f2)
 2008-05-05 18:28:58 +02:00
Volker Lendecke
faa5e8e12c Remove "logon_script" from "struct user_struct" 
(This used to be commit b36fd84186)
 2008-05-05 18:28:58 +02:00
Volker Lendecke
2b3d03d6f1 Remove unix_homedir from struct user_struct 
This makes pdb_get_unix_homedir unused. I wonder if that was ever really used...
(This used to be commit 36bfd32f1f)
 2008-05-05 18:28:58 +02:00
Volker Lendecke
1b2bf00fb9 Remove "homedir" from "struct user_struct" 
(This used to be commit 41f9afd62d)
 2008-05-05 18:28:58 +02:00
Volker Lendecke
6ccbc1065d pipes_struct->pipe_user_name is unused, remove it 
(This used to be commit 32cd4bf34b)
 2008-05-05 18:28:58 +02:00
Günther Deschner
4d8836ab96 Fix client authentication with -P switch in client tools (Bug 5435). 
Guenther
(This used to be commit d077ef64cd)
 2008-05-05 16:59:53 +02:00
Volker Lendecke
d62563342e Remove connection_struct->mem_ctx, connection_struct is its own parent 
(This used to be commit 559180f7d3)
 2008-05-05 11:23:13 +02:00
Jeremy Allison
b430b38220 Remove the "stat_open()" function, flag, and all associated code. It was only 
being (correctly) used in the can_read/can_write checks for hide unreadable/unwritable
and this is more properly done using the functions in smbd/file_access.c.
Preparing to do NT access checks on all file access.
Jeremy.
(This used to be commit 6bfb06ad95)
 2008-05-02 17:22:10 -07:00
Günther Deschner
e7142ef180 ntlmssp: replace UNKNOWN_02000000 with NTLMSSP_NEGOTIATE_VERSION. 
Guenther
(This used to be commit 2c41d69bcf)
 2008-04-30 18:55:57 +02:00
Günther Deschner
d0411c19dc errors: add WERR_NOT_FOUND. 
Guenther
(This used to be commit b9ac03bdfa)
 2008-04-29 20:22:01 +02:00
Steven Danneman
778a5414b1 Fix bug 5419: memory leak in ads_do_search_all_args() when enumerating 1000s of entries 
The ads_do_search_all_args() function attempts to string together several
LDAPMessage structures, returned across several paged ldap requests, into a
single LDAPMessage structure.  It does this by pulling entries off the second
LDAPMessage structure and appending them to the first via the OpenLDAP specific
ldap_add_result_entry() call.

The problem with this approach is it skips non-entry messages such as the
result, and controls.  These messages are leaked.

The short term solution as suggested by Volker is to replace the ads_*_entry()
calls with ads_*_message() calls so we don't leak any messages.

This fixes the leak but doesn't remove the dependence on the OpenLDAP specific
implementation of ldap_add_result_entry().
(This used to be commit f1a5405409)
 2008-04-26 08:11:20 -07:00
Günther Deschner
dddac2bc8f errors: add WERR_INVALID_DOMAINNAME. 
Guenther
(This used to be commit b11a5e70d3)
 2008-04-25 14:49:31 +02:00
Volker Lendecke
63e0884df5 Introduce a redirection for ncacn_np and ncacn_ip_tcp in rpc_pipe_client 
Should be no functional change, just a change in the data structure
(This used to be commit 3433f430b0)
 2008-04-25 11:12:52 +02:00
Volker Lendecke
324e92ea67 Make use of rpccli_xxx_bind_data 
(This used to be commit f9bc336aff)
 2008-04-25 11:12:51 +02:00
Volker Lendecke
862d7e32b9 Move user/domain from rpc_pipe_client to cli_pipe_auth_data 
(This used to be commit 42de50d2cd)
 2008-04-25 11:12:50 +02:00
Volker Lendecke
9e9d40d097 Refactoring: Make cli_pipe_auth_data a pointer off rpc_pipe_client 
(This used to be commit f665afaaa3)
 2008-04-25 11:12:50 +02:00
Volker Lendecke
b78453326b Remove the "pwd" struct from rpc_pipe_client 
The only user of this was decrypt_trustdom_secret, and this only needs the NT
hash anyway.
(This used to be commit 3d8c2a47e6)
 2008-04-21 23:36:05 +02:00
Günther Deschner
bcbac69d1a cldap: avoid duplicate definitions so remove ads_cldap.h. 
Guenther
(This used to be commit 538eefe22a)
 2008-04-21 20:21:40 +02:00
Michael Adam
0db7aba8af Remove redundant parameter fd from SMB_VFS_CLOSE(). 
Now all those redundant fd's have vanished from the VFS API.

Michael
(This used to be commit 1429453551)
 2008-04-21 00:22:42 +02:00
Volker Lendecke
33592bdcb9 Refactoring: Move stuff around for creating a pipe 
(This used to be commit 45be749ed6)
 2008-04-20 14:08:10 +02:00
Volker Lendecke
f56eedb95c Remove the pipe_idx variable from rpc_pipe_client 
(This used to be commit 4840febcd4)
 2008-04-20 11:47:33 +02:00
Volker Lendecke
9048cafbea Move srv_name_slash from cli_state to rpc_pipe_client 
(This used to be commit a9061e52e1)
 2008-04-20 00:14:13 +02:00
Volker Lendecke
2a2188591b Add "desthost" to rpc_pipe_client 
This reduces the dependency on cli_state
(This used to be commit 783afab9c8)
 2008-04-20 00:13:09 +02:00
Volker Lendecke
b46d340fd5 Refactoring: Make struct rpc_pipe_client its own talloc parent 
(This used to be commit a6d74a5a56)
 2008-04-20 00:12:52 +02:00
Jelmer Vernooij
a4c60b2696 rpc_parse: Use UUIDs from librpc/gen_ndr/ when possible to reduce 
duplication.
(This used to be commit 428654b473)
 2008-04-17 17:54:32 +02:00
Günther Deschner
6c6c89cde0 IDL: build generated nbt code. 
Guenther
(This used to be commit 554dcfdab0)
 2008-04-17 14:55:15 +02:00
Jelmer Vernooij
3db2249886 Add simple implementation of several functions in the Samba 4 RPC 
library on top of the Samba 3 RPC library:

 * dcerpc_pipe_connect
 * dcerpc_ndr_request_recv
 * dcerpc_ndr_request_send

These are the main functions used by the generated client calls in Samba
4.
(This used to be commit 3501778242)
 2008-04-17 10:58:10 +02:00
Günther Deschner
c1d4243c5a errors: Add WERR_NO_SUCH_USER. 
Guenther
(This used to be commit 82803186fe)
 2008-04-16 02:37:27 +02:00
Günther Deschner
44912a9fb9 errors: Add WERR_NONE_MAPPED. 
Guenther
(This used to be commit dc165e1c80)
 2008-04-16 02:23:20 +02:00
Jelmer Vernooij
28fd4f6fcb Reconcile ndr_syntax_id used by pidl-generated code and Samba3's RFC_IFACE. 
(This used to be commit 7bea00dca1)
 2008-04-15 20:26:52 +02:00
Günther Deschner
202e8cc57e doserr: Add WERR_INVALID_DOMAIN_STATE and WERR_INVALID_DOMAIN_ROLE. 
Guenther
(This used to be commit 91a55fc27d)
 2008-04-14 15:48:23 +02:00
Volker Lendecke
13a60a4005 Remove namedpipe_transact fn pointer from smb_np_struct 
(This used to be commit d1f82b7e67)
 2008-04-14 14:16:58 +02:00
Michael Adam
01f4bd4f4d adt_tree: change pathtree_add to return WERR instead of bool. 
Michael
(This used to be commit da45fb92f6)
 2008-04-13 15:33:47 +02:00
Michael Adam
413c2e9b0a registry: remove the REGISTRY_HOOKS layer from the reghook cache. 
There is no need to save the keyname again, we only need to
get the REGISTRY_OPS out of the pathtree.

Furthermore, this makes life easier, since we can now pass
in keynames as temporarily allocated strings.

Michael
(This used to be commit 2f9ee2f782)
 2008-04-13 01:43:42 +02:00
Günther Deschner
98abf71ff5 Add WERR_USER_ALREADY_EXISTS and WERR_PASSWORD_RESTRICTION. 
Guenther
(This used to be commit eefd03d39b)
 2008-04-12 18:30:14 +02:00
Günther Deschner
2938315633 Move some WERRORs down to the NERR_BASE block. 
Guenther
(This used to be commit 2453375ee0)
 2008-04-12 18:29:13 +02:00
Stefan Metzmacher
dfb181ab73 dbwrap: add dbwrap_tdb2 backend 
This backend can be used untill ctdb knows about real
transactions.

It stores a master tdb in a shared location and a readonly copy
on the local harddisk. Reads are always on the local tdb
and writes always on both. Change notify messages are send
to all message context, which ask for them. With the notifies
it's possible to just update the changed records, instead of
copying all records (which is the fallback).

You need to configure:

dbwrap:use_tdb2=yes
dbwrap_tdb2:master directory=/some/shared/path
dbwrap_tdb2:local directory=/var/lib/samba

metze
(This used to be commit aa6230de0d)
 2008-04-12 09:14:09 +02:00
Stefan Metzmacher
3ae463ca69 messaging: add MSG_DBWRAP_TDB2_CHANGES flag 
metze
(This used to be commit 7418c3ab1d)
 2008-04-12 09:14:08 +02:00
Stefan Metzmacher
c316c7ab73 messaging: add FLAG_MSG_DBWRAP message class flag 
metze
(This used to be commit ee6325495f)
 2008-04-12 09:14:08 +02:00
Volker Lendecke
c751386bb8 Remove some write-only fstrings 
(This used to be commit aacb07b1b0)
 2008-04-11 22:21:04 +02:00
Günther Deschner
0f50f207b7 Add MAX_NERR define. 
Guenther
(This used to be commit 729eda9540)
 2008-04-10 21:19:30 +02:00
Günther Deschner
e49200c1a2 Add CLI_FULL_CONNECTION_FALLBACK_AFTER_KERBEROS define. 
This allows to switch on the cli->fallback_after_kerberos switch.

Guenther
(This used to be commit 15ba45e567)
 2008-04-08 14:25:13 +02:00
Stefan Metzmacher
206e7eeb6f smbd: make it possible to change the write time delay for testing 
metze
(This used to be commit df8c100c2b)
 2008-04-07 12:29:31 +02:00
Stefan Metzmacher
d03453864a smbd: implement the strange write time update logic 
We now never call file_ntimes() directly, every update
is done via smb_set_file_time().

This let samba3 pass the BASE-DELAYWRITE test.

The write time is only updated 2 seconds after the
first write() on any open handle to the current time
(not the time of the first write).

Each handle which had write requests updates the write
time to the current time on close().

If the write time is set explicit via setfileinfo or setpathinfo
the write time is visible directly and a following close
on the same handle doesn't update the write time.

metze
(This used to be commit 2eab212ea2)
 2008-04-07 12:29:26 +02:00
Stefan Metzmacher
2ccf50256e locking: store the write time in the locking.tdb 
This is needed to implement the strange write time update
logic later. We need to store 2 time timestamps to
distinguish between the time the file system had before
the first client opened the file and a forced timestamp update.

metze
(This used to be commit 6aaa2ce0ee)
 2008-04-07 12:29:25 +02:00
Günther Deschner
b028fd3f8c Add NT_STATUS_RPC_CANNOT_SUPPORT. 
Guenther
(This used to be commit 9e15ce03ca)
 2008-04-03 00:26:55 +02:00
Günther Deschner
99d3590455 Fix NETLOGON credential chain with Windows 2008 all over the place. 
In order to avoid receiving NT_STATUS_DOWNGRADE_DETECTED from a w2k8
netr_ServerAuthenticate2 reply, we need to start with the AD netlogon negotiate
flags everywhere (not only when running in security=ads). Only for NT4 we need
to do a downgrade to the returned negotiate flags.

Tested with w2k8, w2ksp4, w2k3r2 and nt4sp6.

Guenther
(This used to be commit 0970369ca0)
 2008-04-02 11:12:47 +02:00
Gerald W. Carter
8940fd09a6 Patch from Nicholas Brealey <nick@brealey.org> to distinguish between WinXP and WinXP64. 
Defines a new value for the %a variable when detecting a Windows XP 64-bit client.
(This used to be commit 0c94918fb5)
 2008-03-31 14:34:43 -05:00
Volker Lendecke
2aa7dc8bc6 Fix a confusing variable name 
(This used to be commit 32c992e957)
 2008-03-28 13:44:30 +01:00
Günther Deschner
48e238de9b Remove last reference to rpc_netlogon.h. 
Guenther
(This used to be commit 085887eed7)
 2008-03-27 22:18:04 +01:00
Günther Deschner
de34a7d303 Remove unused marshalling for Netlogon Lockout String. 
Guenther
(This used to be commit d87133d051)
 2008-03-27 21:58:11 +01:00
Stefan Metzmacher
474916b70c dbwrap: add db_open_trans() 
This should be used when transactions are wanted.
For now it's just a wrapper of db_open(), but this
will change.

metze

Signed-off-by: Stefan Metzmacher <metze@samba.org>
(This used to be commit 74a070b8a2)
 2008-03-27 18:14:56 +01:00
Günther Deschner
9d9a9e2353 Remove unused DS_DOMAIN_CONTROLLER_INFO struct. 
Guenther
(This used to be commit 7eb4f6f6f9)
 2008-03-27 13:06:43 +01:00
Günther Deschner
ad19eb4ab0 Move netr_LogonLevel flags to IDL, rename old one to netr_LogonInfo. 
Guenther
(This used to be commit 1fc98ee431)
 2008-03-27 13:06:43 +01:00
Günther Deschner
d470243c74 Move DSGETDC_VALID_FLAGS to IDL. 
Guenther
(This used to be commit a14b00ee19)
 2008-03-27 13:06:43 +01:00
Günther Deschner
cba8dcf759 Move LOGON_KRB5_FAIL_CLOCK_SKEW to winbindd_pam. 
Guenther
(This used to be commit fa64c76ac8)
 2008-03-27 13:06:43 +01:00
Günther Deschner
56e5187d84 Move the known NETLOGON_CONTROL reply flags to IDL. 
Guenther
(This used to be commit 4bf2a17c2b)
 2008-03-27 13:06:43 +01:00
Günther Deschner
6f7875abee Move inline comment about MSV1_0 flags to IDL. 
Guenther
(This used to be commit b22167fb60)
 2008-03-27 13:06:43 +01:00
Günther Deschner
82ab936f6a Fill in IDL for PNP_GetDeviceRegProp. 
Guenther
(This used to be commit b1b6e93aa1)
 2008-03-26 12:17:16 +01:00
Günther Deschner
ce8da6978e Comment out some svcctl headers which are now defined in IDL. 
Guenther
(This used to be commit 2201a8118c)
 2008-03-26 12:17:16 +01:00
Michael Adam
f1c844c168 util_tdb: remove trivial and unused tdb_wipe(). 
It has been replaced by tdb_wipe_all().

Michael
(This used to be commit cdde2e4eac)
 2008-03-26 11:15:03 +01:00
Michael Adam
6efe4873dc util_tdb: make the _byblob fetch/store functions public again. 
Users of these are currently being written...

Michael
(This used to be commit 1c51bec531)
 2008-03-26 10:50:35 +01:00
Michael Adam
aaa5971315 util_tdb: add a wrapper tdb_wipe() for traverse with tdb_traverse_delete_fn(). 
Replace all callers of traverse with this tdb_traverse_delete_fn() and
don't export tdb_traverse_delete_fn() anymore.

Michael
(This used to be commit d4be4e30cd)
 2008-03-25 15:55:34 +01:00
Michael Adam
2d02e5a16d util_tdb: add the tdb_pack_append() prototype to util_tdb.h 
This function is currently not used but seems useful.

Michael
(This used to be commit 48149a954c)
 2008-03-25 15:55:34 +01:00
Michael Adam
5e68cbd2e1 util_tdb: group prototypes in util_tdb.h thematically 
Michael
(This used to be commit 4b9231d33e)
 2008-03-25 15:55:34 +01:00
Michael Adam
32691a7022 build: don't autogenerate prototypes for util_tdb and dbwrap anymore. 
Stick to hand-written headers (that are there anyways).
Add some missing prototypes to util_tdb.h and dbwrap.h.

I did not bother to add a header for each single dbwrap backend
open function but put the prototypes for the open functions into
the central dbwrap.h.

Michael
(This used to be commit edf4dbed27)
 2008-03-25 15:55:34 +01:00
Günther Deschner
5fdf4b8f4a Remove remaining old srvsvc client and server rpc code entirely. 
Guenther
(This used to be commit a5f0186f70)
 2008-03-21 04:16:22 +01:00