1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-23 00:23:53 +03:00
Commit Graph

675 Commits

Author SHA1 Message Date
Andrew Bartlett
3f9177bd5d As I raised (without objection) on the mailing list a while back, this
patch removes the 'unicode' smb.conf option.

Clients are as always free not to negotiate unicode, but Samba will always
accept unicode in smbd.

Setting 'unicode = no' caused me more client BSODs than any other option
I have seen, and I really want to protect some of our more silly users, who
will, no matter what, select and change every option...

Andrew Bartlett
-
Gerald Carter
a90c3bd281 BUG 417: fix %UuGg variables expansion in include lines setging the current_user_info struct in register_vuid() -- shouldn't be any more broken than we were -
Gerald Carter
d358f72974 BUG 761: read the config file before initialized default values for printing options -
Gerald Carter
a44f67b141 marking 'only user' as deprecated (based on feedback in bug 66) -
Andrew Bartlett
2202667ebb Merge the 'use cracklib' parameter from HEAD back to 3.0
Andrew Bartlett
-
Gerald Carter
87343fc15a * BUG 101: patch from j.lu@tiesse.com to set the SV_TYPE_PRINTQ_SERVER;
* don't set the unix_ERR_XX code in mkdir_internal, let the error mapping
  handle it.
-
Jeremy Allison
3a3e336030 Fix up name canonicalization (needed for krb5 keytab support later).
Remove source_env handler (no longer used in any codepath).
Jeremy.
-
Gerald Carter
8135ea08b3 removing more unused parameters -
Volker Lendecke
c4a6151f46 Don't substitute stuff in lp_afs_username_map, this is explicitly
done later.

Volker
-
Gerald Carter
6202e0fa72 revert the cracklib changes until post 3.0.2 -
Jeremy Allison
fb088b5679 Remove duplicate extern.
Jeremy.
-
Andrew Bartlett
bc770edb78 First stab at cracklib support (password quality checking) in Samba 3.0
This adds a configure test, that tries to find out if we have a working
cracklib installation, and tries to pick up the debian hints on where
the dictionary might be found.  Default is per my Fedora Core 1 system -
I'm not sure how much it changes.

Andrew Bartlett
-
Andrew Bartlett
6a9bbd1da3 Machines are people too!
While machine accounts cannot use an NTLM login (NT4 style), they are
otherwise full and valid members of the domain, and expect to be able to
use kerberos to connect to CIFS servers.

This means that the LocalSystem account, used by various services, can
perform things like backups, without the admin needing to enter further
passwords.

This particular issue (bug 722) has started to come up a lot on the lists.

I have only enabled it for winbindd-based systems, as the macros use use
to call the 'add user script' will strip the $ from the username for
security reasons.

Andrew Bartlett
-
Andrew Bartlett
6f828ff3d3 ldap rebind sleep -> ldap replication sleep
While writing documentation for metze's patch, it became clear that this is a
better name.

Andrew Bartlett
-
Volker Lendecke
63ffa770b6 This is metze's LDAP rebind sleep patch:
When smb.conf tells us to write to a read-only LDAP replica and we are
redirected by the LDAP server, the replication might take some seconds,
especially over slow links. This patch delays the next read after a rebind for
'ldap rebind sleep' milliseconds.

Metze, thanks for your patience.

Volker
-
Volker Lendecke
d4e071d14b abartlet pointed me at the fact that the order and flags in loadparm.c are
actually used.... 'afs username map' should not show up in the swat basic
view. :-)

Maybe I should use swat from time to time....

Volker
-
John Terpstra
25aa5df5c7 Fixing barfed idmap entries and adding not on use of FLAG_HIDE. -
Jeremy Allison
16097f2072 Added "passwd chat timeout" parameter. Docs to follow.
Jeremy.
-
Gerald Carter
5bf91c79d6 Ensure that items in a list of strings containing whitespace
are written out surrounded by single quotes.  This means that
both double and single quotes are now used to surround
strings in smb.conf.  This is a slight change from the previous
behavior but needed or else things like

    printer admin = +ntadmin, 'VALE\Domain, Admin'

get written to smb.conf by SWAT.
-
Jeremy Allison
48153f7a07 Fix Jerry's no-proto bug :-).
Jeremy.
-
Gerald Carter
12a06dd980 make sure we don't append the ldap suffix when writing out the ldap XXX suffix values in SWAT; based on tpot's original patch; bug 328 -
Gerald Carter
a7685a0697 * make sure we only enumerate group mapping entries
(not /etc/group) even when doing local aliases

* remove "hide local users" parameter; we have this
  behavior built into 3.0
-
Jeremy Allison
3c19ac5f1c Fix bug #471. (const needed in lp_set_name_resolve_order).
Jeremy.
-
Jeremy Allison
d7e35dfb92 Put strcasecmp/strncasecmp on the banned list (except for needed calls
in iconv.c and nsswitch/). Using them means you're not thinking about multibyte at
all and I really want to discourage that.
Jeremy.
-
Tim Potter
351d16956d Moving towards better i18n support in SWAT. This commit contains a
bunch of updates to bug 413 from Monyo:

1) pick up proper strings to call msg strings for example to add
  strings in wizard menu in web/swat.c, web/statuspage.c and
  param/loadparm.c.

2) define N_() macro in include/intl.h to pick up some strings
  in param/loadparm.c

3) quote all name and value tag with '"'
  For example in swat.c:720 the "Edit Parameter Values" string is
  displayd only as "Edit" because value tag is not quoted like:
  value=Edit Parameter Values
  These tags should be quoted though it sometimes works well
  without quotation.

4) modify the msg strings not to contain HTML tags or other
  non-message strings. For example
  dprintf(_("test\n")); is modified to dprintf("%s\n", _("test"));
-
Gerald Carter
cd06472e42 mark 'mangled map' as depcreated and remove 'mangled stack' -
Volker Lendecke
a6c54cbe20 Don't #ifdef an AFS option with WITH_ADS. Thanks, jerry!
Volker
-
Volker Lendecke
4a3f7a9356 This only touches the fake kaserver support. It adds two parameters:
afs share -- this is an AFS share, do AFS magic things
afs username map -- We need a way to specify the cell and possibly
		    weird username codings for several windows domains
		    in the afs cell

Volker
-
Gerald Carter
5c0c9d68b4 remove references to 'strip dot' -
Gerald Carter
fe585d49cc address bug #359. Andrew B's patch for implementing client
portion of NTLMv2 key exchange.  Also revert the default for
'client ntlmv2 auth' to no.  This caused no ends of grief in
different cases.

And based on abartlet's mail....

> All I care about at this point is that we use NTLMv2
> in our client code when connecting to a server that
> supports it.

There is *no* way to tell this.  The server can't tell us, because it
doesn't know what it's DC supports.  The DC can't tell us, because it
doesn't know what the trusted DC supports.  One DC might be Win2k, and
the PDC could be an older NT4.
-
Jeremy Allison
f35e9a8b90 More tuning from cachegrind. Change most trim_string() calls to trim_char(0,
as that's what they do. Fix string_replace() to fast-path ascii.
Jeremy.
-
Gerald Carter
8fd13b6310 revert the change from r1.414 in HEAD that removed the
ability to use variables in paths for the [homes] service.
-
Jeremy Allison
467cafdb1f More hand-tuning of the fastpath. Don't do strlen() when we're doing
to walk to the end anyway.
Jeremy.
-
Gerald Carter
ea54bfc211 revert a change to r1.397.2.91 because to operate like the docs; browseable for new home directories should be inheritied from the global defaults, not [homes] -
Gerald Carter
3724063f15 remove 'ldap trust ids' since there was no way for it to work now -
Jeremy Allison
84ae44678a Fix the character set handling properly in nmbd. Also fix bug where
iconv wasn't re-initialised on reading of "charset" parameters. This
caused workgroup name to be set incorrectly if it contained an
extended character.
Jeremy.
-
Gerald Carter
9554a661c2 fix compile problem (stray character) -
Gerald Carter
1278d24961 ensure that 'available = no' works for [homes]; reported by Walter Haidinger -
Jeremy Allison
17b09eed96 Turn UNIX extensions on by default. Yes I will change the docs :-).
Jeremy.
-
Gerald Carter
ae452e51b0 metze's autogenerate patch for version.h -
Jelmer Vernooij
dd43a29504 - Update 'preload modules' documention (bug #304)
- Fix WINS Server List in SWAT (bug #197)
- Don't segfault SWAT when adding shares (bug #254)
-
Alexander Bokovoy
836b9fffa0 Fix charset detection code in configure.
Now we are:
1. Try to find correct name for default character sets for the platform
2. Use DEFAULT_{DOS|DISPLAY|UNIX}_CHARSET defines set during configure phase as defaults

This should fix CP850 problem on Solaris (at least) because it actually has IBM850 which
is the same but under different name
-
Jeremy Allison
e66bfe212d Make client signing auto.
Jeremy.
-
Volker Lendecke
d07f173767 Fix typos.
Volker
-
Jeremy Allison
729b468f7e Turn on client ntlmv2 by default.
Jeremy.
-
Jim McDonough
a2bd8f0bfa Update my copyrights according to my agreement with IBM -
Jim McDonough
15d2bc4785 Fix copyright statements for various pieces of Anthony Liguori's work. -
John Terpstra
de7d3063d9 Cleanup of loadparm and swat to correctly display all parameters as required.
No change to what is displayed has been made at this time. I do intend to
change the display order before 3.0.0 ships.
-
Jeremy Allison
e5714edc23 Signing so far... the client code fails on a SMBtrans2 secondary transaction
I think (my changes haven't affected this I believe). Initial support on the
server side for smbclient. Still doesn't work for w2k clients I think...
Work in progress..... (don't change).
Jeremy.
-
Jeremy Allison
f2e84f1ba6 Putting the framework for server signing in place. Ensure we don't use
sendfile when signing (I need to add this for readbraw/writebraw too...).
Jeremy.
-