1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

48891 Commits

Author SHA1 Message Date
Stefan Metzmacher
b99926ca5e s4: ntvfs/posix: to set a DACL at open time SEC_DESC_DACL_PRESENT must be set
metze
2008-10-28 17:13:21 +01:00
Stefan Metzmacher
8160cd1595 s4: libcli/security: a NULL DACL allows access
This fixes bug 4284.

metze
2008-10-28 17:10:51 +01:00
Stefan Metzmacher
7a4d937fd9 s4: lsa-server: fix crash bugs related to [out,ref] ** changes
metze
2008-10-28 12:21:44 +01:00
Stefan Metzmacher
6bc9fb887f selftest: move gdb_* and valgrind_* scripts to selftest/
metze
2008-10-28 12:20:59 +01:00
Stefan Metzmacher
2b29b71864 s4: import lorikeet-heimdal-200810271034
metze
2008-10-28 08:53:09 +01:00
Günther Deschner
698b7fd436 netapi: fix access bits in netapi.
Guenther
2008-10-28 00:13:50 +01:00
Günther Deschner
f5269ff182 s3-netlogon: kill an fstring in rpc_server.
Guenther
2008-10-28 00:13:50 +01:00
Günther Deschner
0e389dc56c s4-lsa-server: remove merge leftover.
Guenther
2008-10-28 00:13:50 +01:00
Jelmer Vernooij
35f12009af Merge branch 'master' of ssh://git.samba.org/data/git/samba 2008-10-27 23:41:48 +01:00
Jelmer Vernooij
aafe9ca1aa Fix definition of environ on Mac OS X (bugzilla: #5412). 2008-10-27 23:39:53 +01:00
Jelmer Vernooij
807b862bc9 Fix duplicate inclusion of zlib.m4. 2008-10-27 23:34:23 +01:00
Jelmer Vernooij
9de5172a20 Remove duplicate check for volatile, move all utime-checks to
libreplace.
2008-10-27 23:23:15 +01:00
Günther Deschner
a4ad265850 s4-libnet: fix user and group enumeration functions after lsa changes.
Guenther
2008-10-27 21:46:50 +01:00
Günther Deschner
d04131c8ec idl: share lsa.idl between s3 and s4.
Guenther
2008-10-27 19:33:23 +01:00
Günther Deschner
95231eae39 s4-lsa: merge lsa_QueryInfoPolicy/{2} from s3 lsa idl.
Guenther
2008-10-27 19:33:23 +01:00
Günther Deschner
92f1c0d156 s4-lsa: merge lsa_LookupNames/{2,3,4} from s3 lsa idl.
Guenther
2008-10-27 19:33:23 +01:00
Günther Deschner
992c03a192 s4-lsa: merge lsa_LookupSids/{2,3} from s3 lsa idl.
Guenther
2008-10-27 19:33:23 +01:00
Günther Deschner
8e622f57e7 s4-lsa: merge lsa_QueryDomainInformationPolicy from s3 lsa idl.
Guenther
2008-10-27 19:33:23 +01:00
Günther Deschner
ea88686419 s4-lsa: merge lsa_QueryTrustedDomainInfoByName from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
36725ec0b4 s4-lsa: merge lsa_QueryTrustedDomainInfo from s3 idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
7c3d1dd8a9 s4-lsa: merge lsa_QueryTrustedDomainInfoBySid from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
8bcc939a8c s4-lsa: merge lsa_LookupPrivName from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
ea6b4865ea s4-lsa: merge lsa_EnumPrivsAccount from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
95c69caef6 s4-lsa: merge lsa_LookupPrivDisplayName from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
6a2dabe1a7 s4-lsa: merge lsa_GetUserName from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
6131c0d888 s4-lsa: merge lsa_EnumTrustDom from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
7e19dd6a0a s4-lsa: merge lsa_EnumAccounts from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
fb38705e42 s4-lsa: merge lsa_EnumPrivs from s3 lsa idl.
Guenther
2008-10-27 19:33:22 +01:00
Günther Deschner
4ee7b58e0a s4-lsa: merge lsa_QuerySecurity from s3 lsa idl.
Guenther
2008-10-27 19:33:21 +01:00
Michael Adam
b881d2ee78 [s3]winbind: fix smbd hanging on Solaris when winbindd closes socket.
On some versions of Solaris, we observed a strange effect of close(2)
on a socket: After the server (here winbindd) called close, the client fd
was not marked as readable for select. And a write call to the fd did
not produce an error EPIPE but just returned as if successful.

So while winbindd had called remove_client(), the corresponding smbd
still thought that it was connected, but failed to retrieve answers
for its queries.

This patch works around the problem by forcing the client fd to
the readable state: Just write one byte into the socket before
closing.

Michael
2008-10-27 14:59:33 +01:00
Günther Deschner
68aa9bd67f s3-rpcclient: add getdcsitecoverage call.
Guenther
2008-10-27 14:29:04 +01:00
Günther Deschner
5a4b421952 s3-build: re-run make samba3-idl.
Guenther
2008-10-27 14:29:04 +01:00
Günther Deschner
eb3c826f7b s3-netlogon-idl: fix IDL for netr_DsrGetDcSiteCoverageW.
Guenther
2008-10-27 14:29:04 +01:00
Michael Adam
151dfd9dd1 [s3]build: fix bug #5765 - fix installlibs on solaris by using portable "test -r"
instead of test -e, which /bin/sh on solaris does not know.

Michael
2008-10-27 13:51:47 +01:00
Michael Adam
e4fe3320ec [s3]libsmbconf: add utility function smbconf_is_writeable_bystring()
This checks the writeability of a config source specified by the
config source name.

Michael
2008-10-27 13:02:41 +01:00
Michael Adam
3a06201086 [s3]libsmbconf: add method is_writeable() and wrapper smbconf_is_writeable()
This allows for per-config-source checking of write support.

Michael
2008-10-27 13:02:40 +01:00
Michael Adam
9c09d545bf [s3]libsmbconf: create text config in smbconftort
Michael
2008-10-27 13:02:40 +01:00
Michael Adam
b23106745c [s3]libsmbconf: return WERR_BADFILE when no path to text backend is provided.
Michael
2008-10-27 13:02:39 +01:00
Michael Adam
64ab71d2d7 [s3]libsmbconf: fall back to file backend when no valid backend was found
Interpret the source string as a file name when it contains
a ':' sign but the initial part is not a known backend.
This might occur even implicitly when "%T" is used in an
include file name (even though this is not realistic..).

Michael
2008-10-27 13:02:39 +01:00
Michael Adam
e453bf70c9 [s3]libsmbconf: fix comment typo.
Michael
2008-10-27 13:02:38 +01:00
Michael Adam
9299d53ef9 [s3]libsmbconf: add backend_requires_messaging() method to libsmbconf.
In a clustered environment, the registry backend needs messaging
to be set up since ctdb requires this.

Michael
2008-10-27 13:02:38 +01:00
Michael Adam
0ee8992331 [s3]libsmbconf: remove unused define.
Michael
2008-10-27 13:02:37 +01:00
Michael Adam
1d3dcd1e42 [s3]pidfile_create: use check is_default_dyn_CONFIGFILE() since we have it.
Michael
2008-10-27 13:02:37 +01:00
Michael Adam
268caef85e [s3]test: fix testparm_s3 tests: don't create truncated smb.conf files.
Use whole argument string in test_one_global_option(), not only first.

Michael
2008-10-27 13:02:36 +01:00
Michael Adam
65ca8eb3dd [s3]pdbedit: remove unused variable.
Note: The change of commit r21962 (or fe962d2e48, aka f540c18b2)
that was partly lost in the SVN->git glue commit e5a951325a
(aka 5c6c8e1fe9) is not needed any more since the handler
for option "-s" calls set_dyn_CONFIGFILE().

Michael
2008-10-27 13:02:36 +01:00
Michael Adam
1c6aa01e1f [s3]build: fix bug #5677 - fix test_{shlibs,nss_modules,pam_modules} on Solaris
and other systems where sh does not support "export FOO=bar"
by separating setting and exporting the variable.

Thanks to Yasuma Takeda <yasuma@osstech.co.jp> for the patch.

Michael
2008-10-27 13:02:35 +01:00
Jelmer Vernooij
71a2e02cf1 Merge branch 'master' of ssh://git.samba.org/data/git/samba 2008-10-26 00:41:34 +02:00
Volker Lendecke
7bea6684c2 Add proxied named pipe support
This is a central piece of the "merged build" thing: Forward named pipes from
samba3 to samba4. This patch is not finished yet, as we will have to forward
the smb-level authentication information to samba4, but I'm pushing this patch
already to demonstrate the implementation without clutter.

It adds an intermediate parameter

np:proxy = srvsvc samr winreg wkssvc ... and so on

that states which of the pipes should be forwarded to the s4 unix domain socket
DEFAULT. The parameter is intermediate because once we have a proper endpoint
mapper implementation, this information will be retrieved out of a database.

If anybody wants to try this, do the merged build and configure s4 with

server services = samba3_smb, rpc, nbt, wrepl, ldap, cldap, kdc, drepl
samba3:smbd = /data/inst/sbin/smbd

and s3 with

auth methods = guest netlogond
np:proxy = srvsvc samr winreg wkssvc netlogon ntlsa ntsvcs lsass lsarpc netdfs \
rpcecho initshutdown epmapper svcctl eventlog drsuapi

Then run rpcclient against samba4. It will fork s3, which authenticates against
s4, and then forwards the rpc requests to s4.

Volker
2008-10-25 15:42:51 +02:00
Volker Lendecke
f87219d6e6 Move the is_known_pipename check into np_open 2008-10-25 15:23:36 +02:00
Volker Lendecke
1ad54998a9 Add str_list_check[_ci] to s3's proto.h
Jelmer, when I include lib/util/util.h into some s3 file I get errors, this is
why I put those prototypes here as a workaround. Might be fixed differently
later.
2008-10-25 13:50:25 +02:00