1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Commit Graph

13240 Commits

Author SHA1 Message Date
Stefan Metzmacher
b5e814294e * Add SIGABRT to fault handling
so we now got a backtrace, if we crash
  in libldap with SIGABRT

metze
0001-01-01 00:00:00 +00:00
Volker Lendecke
413ed77142 Fix compiler warning 0001-01-01 00:00:00 +00:00
Volker Lendecke
ea1a5fb303 Display some nicer error messages for login via 'net'. I don't
see a reason why we have so many special cases and not simply use
nt_errstr(nt_status).

Comments?

Volker
0001-01-01 00:00:00 +00:00
Jeremy Allison
25d739978f Fix for a signing bug when the mid wraps.
Found by Fran Fabrizio <fran@cis.uab.edu>.
Add to the *start* of the list not the end of the list.
This ensures that the *last* send sequence with this mid
is returned by preference.
This can happen if the mid wraps and one of the early
mid numbers didn't get a reply and is still lurking on
the list.
Jeremy.
0001-01-01 00:00:00 +00:00
Gerald Carter
faec928564 fix another bug caused by cli_lsa_query_info_policy() changes 0001-01-01 00:00:00 +00:00
Jim McDonough
07d6ed4343 Fix another join problem. Don't use a TALLOC_CTX before it has been
initialized.

Also split out the oldstyle join into a new fn, allowing us to call it
with no failure message from net rpc join, but displaying a failure message
when used with net rpc oldjoin.
0001-01-01 00:00:00 +00:00
Volker Lendecke
4c90421070 Patch from "Stoian Ivanov" <sdr@bultra.com>: Add -g (greppable..) to
smbclient -L to make the output usable in pipes.

Volker
0001-01-01 00:00:00 +00:00
Volker Lendecke
da5944129f Commit sid<->[ug]id extensions to libnss_winbind.so on Linux, as well as a
factored-out nss_winbind.[ch]. I took tridge's public domain license comment
for the nss_winbind.[ch].

This is probably not the last word on that extension, but as it is quite
non-intrusive to the main samba code, I would like to give it a start.

Volker
0001-01-01 00:00:00 +00:00
Gerald Carter
2fd2c07df4 Bug 381: check builtin (not local) group SID. Patch from Jianliang Lu <j.lu@tiesse.com> 0001-01-01 00:00:00 +00:00
Gerald Carter
db1c6721bf setting version to 3.0.2rc2 0001-01-01 00:00:00 +00:00
Jim McDonough
a885df7635 Fix net rpc join (at least newstyle) after it was broken by changing
the parms to cli_lsa_query_info_policy without changing them here...
0001-01-01 00:00:00 +00:00
Gerald Carter
79fe75dcdf * BUG 446
- setup_logging() in smbclient to be interactive (remove the timestamps)
  - Fix bad return value in pull_ucs2( needs more testing to make sure this
    didn't break something else) that caused clistr_pull() to always read
    the same string from the buffer (pull_usc2() could return -1 if the original
    source length was given as -1)
  - increment some debugging messages to avoid printing them out so often
0001-01-01 00:00:00 +00:00
Gerald Carter
c51eaec4f0 BUG 958; don't use the -N option when invoking smbclient from the smbtar script 0001-01-01 00:00:00 +00:00
Volker Lendecke
3d9931fe29 reply_spnego_kerberos did not set the domain of the user handed to
register_vuid correctly. We ended up with the local netbios name in
substitutions for %D later.

Volker

P.S: Tridge, I can *really* see why you want to get rid of global variables
:-)
0001-01-01 00:00:00 +00:00
Volker Lendecke
c4a6151f46 Don't substitute stuff in lp_afs_username_map, this is explicitly
done later.

Volker
0001-01-01 00:00:00 +00:00
Volker Lendecke
945c780764 And another memory corruption in winbind. Arg 3 of safe_strcpy does not
include the terminating 0.

Volker
0001-01-01 00:00:00 +00:00
Volker Lendecke
cd89288e21 Fix a segfault in winbindd. Calling getusersids with a SID that results in 0
groups winbind ended up freeing an uninitialised pointer.

Volker
0001-01-01 00:00:00 +00:00
Stefan Metzmacher
b0c0d73691 * Fix sys_chown() when no chown() is presend
metze
0001-01-01 00:00:00 +00:00
Stefan Metzmacher
e9e5e2036f * Fix XFS quotas: XFS_USER_QUOTA -> USRQUOTA
XFS_GROUP_QUOTA -> GRPQUOTA
* Fix disk_free calculation with group quotas.
* Add debug class 'quota' and a lot of DEBUG()'s
  to the quota code.

metze
0001-01-01 00:00:00 +00:00
Gerald Carter
5134c6bcbc BUG 936: fix bind credentials for schannel binds in smbd (and add a comment to winbindd_cm about this 0001-01-01 00:00:00 +00:00
Tim Potter
67d25f3de8 Fix for bug 905. Remove POBAD_CC as it doesn't seem to be applicable
anymore.
0001-01-01 00:00:00 +00:00
Gerald Carter
1c15bfacb4 BUG 972; check pointer in cli_ds_getprimarydominfo() before trying to copy a structure 0001-01-01 00:00:00 +00:00
Herb Lewis
a363e5d8c5 source/rpc_parse/parse_prs.c ZERO_STRUCTP(ps) not needed as it is done
in prs_init now

testsuite/printing/psec.c	cannot do a prs_mem_free() when tdb_prs_fetch fails
				as the prs structure has not been initialized
0001-01-01 00:00:00 +00:00
Gerald Carter
40b7d863dc Fix initgroups() call nss_winbind on solaris; patch from John Klinger <john.klinger@lmco.com> 0001-01-01 00:00:00 +00:00
Gerald Carter
5145611188 bug 770; correct fix this time; Make sure that we send the SMBjobid for unix jobs back to the client. Allows windows client to remove print jobs submitted from lpr 0001-01-01 00:00:00 +00:00
Gerald Carter
be9f25bea9 bug 660; using byte order safe macros (or tdb_unpack) when reading 2 or 4 byte values from a tdb buffer 0001-01-01 00:00:00 +00:00
Gerald Carter
6202e0fa72 revert the cracklib changes until post 3.0.2 0001-01-01 00:00:00 +00:00
Gerald Carter
1ed2e52153 * Revert to using rpc for mixed mode AD domains.
The reason for this are:
  (a) the set_dc_type_and_flags() cannot tell the different
      between connecting to an NT4 domain and an NT4 BDC
      of a mixed mode domain.
  (b) the connection management for the rpc backend only
      provides on named pipe per cli_state.  So it is possible
      to connect to an NT4 BDC for netlogon and an AD mixed mode
      DC for lsarpc.  RPC is the lowest common demonimator here.
  (c) Issue with the sequence number value between the
      highestCommittedUSN LDAP attribute and the seq_num returned
      via RPC.


We will revisit this later, but the changes need to make this
work right now are too broad and risky.
0001-01-01 00:00:00 +00:00
Jeremy Allison
fb088b5679 Remove duplicate extern.
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
da51988cfa Remove references to 'jn' which gcc-3.4 with precompiled headers
doesn't like.
Jeremy.
0001-01-01 00:00:00 +00:00
Stefan Metzmacher
c73e845055 fix XFS quotas the macro changed from HAVE_XFS_QUOTA -> HAVE_XFS_QUOTAS
metze
0001-01-01 00:00:00 +00:00
Andrew Bartlett
b0b2010461 Remove duplicate comment.
Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
17518018c0 Finish adding cracklib support - this adds the configure test to enable
it, on machines that actually have a working cracklib, for which we have
the correct path to the dictionary.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Gerald Carter
bca702c976 * allow dns lookups to be disabled for DOMAIN#1c (and #1b)
names
* fix some a mispelled variable name
0001-01-01 00:00:00 +00:00
Andrew Bartlett
4a01f3dbb4 On systems without a working cracklib, ensure we don't include the header
(the actual call to crack was already in this #ifdef)

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Gerald Carter
d7b6298b9e fixing compile problems due to my recent ads.h changes 0001-01-01 00:00:00 +00:00
Andrew Bartlett
bc770edb78 First stab at cracklib support (password quality checking) in Samba 3.0
This adds a configure test, that tries to find out if we have a working
cracklib installation, and tries to pick up the debian hints on where
the dictionary might be found.  Default is per my Fedora Core 1 system -
I'm not sure how much it changes.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Stefan Metzmacher
12d6bc3bd0 update copyright to -2004
metze
0001-01-01 00:00:00 +00:00
Jelmer Vernooij
d12b793d9c Fix swatdir location for --with-fhs 0001-01-01 00:00:00 +00:00
Gerald Carter
ebabf72a78 fix some warnings from the Sun compiler 0001-01-01 00:00:00 +00:00
Andrew Bartlett
7e75a6d681 Romve debugging assertions (oops...)
Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
35f6347a73 Add a new type of name lookup 'ads'. This seperates this from normal
hostname lookups, and ensures that we don't lookup 'short' (ie NetBIOS)
domain names in DNS.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Jelmer Vernooij
65b01f67d5 Use StrCaseCmp, not strcasecmp. Should fix winbind build on IRIX 0001-01-01 00:00:00 +00:00
Gerald Carter
ba9dc0d9fd fix segfault when sid_ptr == 0 in DsEnumDomainTrusts() reply 0001-01-01 00:00:00 +00:00
Gerald Carter
8e8a351cab fix a seg fault caused by abartlet's last checkin; there's no way this could have been tested against an NT4 DC 0001-01-01 00:00:00 +00:00
Andrew Bartlett
595dee6607 use SAFE_FREE(), not free().
Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
7c34de8096 This merges in my 'always use ADS' patch. Tested on a mix of NT and ADS
domains, this patch ensures that we always use the ADS backend when
security=ADS, and the remote server is capable.

The routines used for this behaviour have been upgraded to modern Samba
codeing standards.

This is a change in behaviour for mixed mode domains, and if the trusted
domain cannot be reached with our current krb5.conf file, we will show
that domain as disconnected.

This is in line with existing behaviour for native mode domains, and for
our primary domain.

As a consequence of testing this patch, I found that our kerberos error
handling was well below par - we would often throw away useful error
values.  These changes move more routines to ADS_STATUS to return
kerberos errors.

Also found when valgrinding the setup, fix a few memory leaks.

While sniffing the resultant connections, I noticed we would query our
list of trusted domains twice - so I have reworked some of the code to
avoid that.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
c9f9d6d317 In tdb_allocate(), we would create a new record by writing a local variable
'newrec' into the tdb.

This was not initialised, so valgrind warned about it.

(Note:  valgrind only makes sense on tdbs with 'mmap = no' in your smb.conf)

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
7e6cc8f003 Make it clearer that the domain here is the domain of the user for
authentication.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
2e6eaad9ce Move more of winbind to use 'find_our_domain()' rather than the dangerous
find_domain_from_name(lp_workgroup()).

(as find_domain_from_name() can change the data in lp_workgroup())

Andrew Bartlett
0001-01-01 00:00:00 +00:00