1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-28 00:49:42 +03:00

81 Commits

Author SHA1 Message Date
Gerald Carter
d19dad8815 r15549: removing rhosts and 'hosts equiv' authentication features 2007-10-10 11:16:58 -05:00
Derrell Lipman
f2a24de769 r13212: r12414@cabra: derrell | 2006-01-28 17:52:17 -0500
lp_load() could not be called multiple times to modify parameter settings based
 on reading from multiple configuration settings.  Each time, it initialized all
 of the settings back to their defaults before reading the specified
 configuration file.

 This patch adds a parameter to lp_load() specifying whether the settings should
 be initialized.  It does, however, still force the settings to be initialized
 the first time, even if the request was to not initialize them.  (Not doing so
 could wreak havoc due to uninitialized values.)
2007-10-10 11:06:18 -05:00
Gerald Carter
a4c6eceaae r13133: patch from Makr Proehl <m.proehl@science-computing.de> for dumping server role when calling 'testparm -s' (BUG 1336) 2007-10-10 11:06:14 -05:00
Jeremy Allison
c970d7d0a5 r12555: Fix more load_case_table swegfaults. Arggg.
What I'd give for a global constructor...
Jeremy.
2007-10-10 11:05:59 -05:00
Günther Deschner
c727a1a330 r12415: Forgot newlines.
Guenther
2007-10-10 11:05:55 -05:00
Günther Deschner
6c4a6da3dc r12414: Remove the unnecessary SMB_STRDUP in server_role_str() + reuse the role
translation elsewhere.

Guenther
2007-10-10 11:05:55 -05:00
Volker Lendecke
30fcdf84d8 r11999: Re-add "passdb expand explicit".
We came to the conclusion that changing the default is something that has to
wait one or two more releases, but it will happen one way or the other.

Volker
2007-10-10 11:05:41 -05:00
Gerald Carter
939c3cb5d7 r10656: BIG merge from trunk. Features not copied over
* \PIPE\unixinfo
* winbindd's {group,alias}membership new functions
* winbindd's lookupsids() functionality
* swat (trunk changes to be reverted as per discussion with Deryck)
2007-10-10 11:04:48 -05:00
Lars Müller
a1b82624d7 r7511: Add three new command line switches to testparm:
--show-all-parameters
        Enumerates all available parameters, grouped in to sections
        [local] and [global] by the class of the parameter.  Each line
        is formated name=type[,enum values],flags
--parameter-name
        Display the setting of the named parameter.  The global section
        is assumed if no other is set with --section-name
--section-name
        Limit the view of testparm to the named section.  Use 'global'
        to only view the settings of the global section.

This fixes bug #2767.

Lars
2007-10-10 10:57:10 -05:00
Simo Sorce
1424612047 r5176: Warn the user that print command is ignored when using cups libraries 2007-10-10 10:55:32 -05:00
Gerald Carter
23422aeec0 r3683: BUG 2017: fix testparm reporting for the passwd program string 2007-10-10 10:53:14 -05:00
Jelmer Vernooij
a48b3b291c r2826: Complain if 'password chat' doesn't contain the %u variable. based on a patch by Ronan Waide 2007-10-10 10:52:54 -05:00
Jeremy Allison
94a272b9a8 Added strstr_m() function. Use in all places where we might run into mb
(should fix the mb service name problem, can't remember the bugid).
Jeremy.
-
John Terpstra
0450dc9773 Changed output so all debug output goes to stderr, and all file processing
goes to stdout.

Note: This change permits use of testparm processing of smb.conf to be
redirected into a file that can be used as an smb.conf file. ie: All
information that should not be in smb.conf will be on stderr, all pertinent
smb.conf info will go to stdout.

Example of use:
	A fully documented smb.conf.master file can be maintained.
	To create smb.conf do:
		testparm -s > smb.conf
-
Jelmer Vernooij
2690c185f0 Testparm fixes:
- Also check global 'hosts allow'/'hosts deny' when checking access to share
 - Warn when user specifies 2 arguments instead of 1 or 3.

Patch from Jay Fenlason <fenlason@redhat.com>
-
Christopher R. Hertel
be06e52ce0 Fixed test and wording for long share names.
The RAP NetShareEnum() call has a length limit of 12 characters (not 8, as
previously tested).  Took DaveCB's suggested and added a note listing some
of the client systems that might be affected.
-
Jeremy Allison
28631ef23f Fix for incorrect error message - found by Alex Davis <alex14641@yahoo.com>.
Jeremy.
-
Jeremy Allison
c043835c87 Test invalid map system, map hidden, create mask, force create mask
parameters. Fix return code for Samba 4 torture tester.
Jeremy.
-
Jim McDonough
897125a9db Fix bug #136. Add message about erroneous empty "passdb backend" parameter. -
Jelmer Vernooij
d817eaf0ec Reverse previous patch from Stefan and me after comments by Andrew Bartlett -
Jelmer Vernooij
74d9ecfe2d Patch from metze and me that adds dummy smb_register_*() functions so
that is now possible to, for example, load a module which contains
an auth method into a binary without the auth/ subsystem built in.
-
Jelmer Vernooij
1755d5f662 Use the new modules system for passdb (merge from HEAD) -
Jelmer Vernooij
b3328dab2f Add some more functions for the modules (backport from HEAD):
- init_modules()
 - smb_probe_module()
-
Tim Potter
6a54d9a0a7 Merge:
- Jelmer's latest popt changes
-
Andrew Bartlett
29d909b184 One more on set_local_machine_name() taking a new 'perm' argument. -
Jeremy Allison
b14e174c65 Added Volkers "print server role" patch.
Jeremy.
-
Andrew Bartlett
1df808ac89 Merge from HEAD - patch by metze to fill in 'workgroup' etc in testparm output,
and probably SWAT too..

Andrew Bartlett
-
Tim Potter
d3998307ad Merge a bunch of trivial changes from HEAD. The difference remaining
should actual functional differences between HEAD and 3.0.

 - Mostly reformatting
 - Removal of unecessary #include "smb.h"
 - Merge of dyn_DRIVERFILE removal
 - Silly bug fix for python code
-
Jeremy Allison
f755711df8 Removed global_myworkgroup, global_myname, global_myscope. Added liberal
dashes of const. This is a rather large check-in, some things may break.
It does compile though :-).
Jeremy.
-
Jelmer Vernooij
1a25dc776d Sync with HEAD -
Andrew Bartlett
89d8ebd520 Merge vl's 'algorithmic rid base' patch, and my changes to pdb_smbpasswd's NUA
support from HEAD -> 3.0

Andrew Bartlett
-
Gerald Carter
a1c4a16267 logic error in checking wins servers--merged from HEAD -
Gerald Carter
65e7b5273b sync'ing up for 3.0alpha20 release -
Jelmer Vernooij
1b83b78e33 sync 3.0 branch with HEAD -
Andrew Tridgell
03ac082dcb updated the 3.0 branch from the head branch - ready for alpha18 -
Volker Lendecke
8ecfed59a3 3 branches might become a pain... :-)
Volker
-
Tim Potter
423985ed56 Spelling. -
Andrew Tridgell
775404fe46 the SEC_DOMAIN tests also apply to SEC_ADS -
Tim Potter
6a58c9bd06 Removed version number from file header.
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
-
Herb Lewis
39d6b31e14 merge changes from 2.2 branch to prevent smb.conf from changing debug level
of commands when specified on command line.
-
Andrew Bartlett
8d31eae52a This is another rather major change to the samba authenticaion
subystem.

The particular aim is to modularized the interface - so that we
can have arbitrary password back-ends.

This code adds one such back-end, a 'winbind' module to authenticate
against the winbind_auth_crap functionality.  While fully-functional
this code is mainly useful as a demonstration, because we don't get
back the info3 as we would for direct ntdomain authentication.

This commit introduced the new 'auth methods' parameter, in the
spirit of the 'auth order' discussed on the lists.  It is renamed
because not all the methods may be consulted, even if previous
methods fail - they may not have a suitable challenge for example.

Also, we have a 'local' authentication method, for old-style
'unix if plaintext, sam if encrypted' authentication and a
'guest' module to handle guest logins in a single place.

While this current design is not ideal, I feel that it does
provide a better infrastructure than the current design, and can
be built upon.

The following parameters have changed:
 - use rhosts =

  This has been replaced by the 'rhosts' authentication method,
 and can be specified like 'auth methods = guest rhosts'

 - hosts equiv =

  This needs both this parameter and an 'auth methods' entry
  to be effective.  (auth methods = guest hostsequiv ....)

 - plaintext to smbpasswd =

  This is replaced by specifying 'sam' rather than 'local'
  in the auth methods.

The security = parameter is unchanged, and now provides defaults
for the 'auth methods' parameter.

The available auth methods are:

guest
rhosts
hostsequiv
sam (passdb direct hash access)
unix (PAM, crypt() etc)
local (the combination of the above, based on encryption)
smbserver (old security=server)
ntdomain (old security=domain)
winbind (use winbind to cache DC connections)


Assistance in testing, or the production of new and interesting
authentication modules is always appreciated.

Andrew Bartlett
-
Tim Potter
8fc772c9e5 Removed TimeInit() call from every client program (except for one place
in smbd/process.c where the timezone is reinitialised.  Was replaced with
check for a static is_initialised boolean.
-
Martin Pool
79ec88f0da Store some path names in global variables initialized to configure
default, rather than in preprocessor macros.
-
Andrew Tridgell
ab7f67677a first step in converting the head branch to use lang_tdb.c instead
of gettext for internationalisation support. There is more to do
-
Jeremy Allison
d1adaee373 Fixed bug when status=no and max smbd processes > 0.
Jeremy.
-
Tim Potter
2d0922b0ea Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header. -
Andrew Bartlett
5f5b4b48ca Check 'hosts equiv' and 'use rhosts' compatability with 'hostname
lookup' value.
-
Andrew Tridgell
f41c3bb80f declare dbf in one spot -
Andrew Tridgell
1af8bf34f1 replaced stdio in many parts of samba with a XFILE. XFILE is a cut-down
replacemnt of stdio that doesn't suffer from the 8-bit filedescriptor
limit that we hit with nasty consequences on some systems

I would eventually prefer us to have a configure test to see if we need
to replace stdio, but for now this code needs to be tested widely so
I'm enabling it by default.
-
Christopher R. Hertel
5b975d3a9c Same as nmbd.c. These now test wins_srv_count() instead of lp_wins_server
to determine whether the 'wins server' parameter is set.
-