1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-15 23:24:37 +03:00

53885 Commits

Author SHA1 Message Date
Stefan Metzmacher
ebc860ebeb s3:smbd: move SMB1 specific stuff into a substructure of smbd_server_connection
metze
2009-05-26 10:48:12 +02:00
Stefan Metzmacher
31c6679bf1 s3:smbd: add support for SMB2 signing
metze
2009-05-26 09:53:06 +02:00
Stefan Metzmacher
bd8a38b60e s3:smbd: return the correct security mode and capabilities in SMB2 Negotitate
metze
2009-05-26 09:53:05 +02:00
Stefan Metzmacher
53df343644 s4:libcli/smb2: remove old dialect revision constants
metze
2009-05-26 09:50:50 +02:00
Stefan Metzmacher
fadffbae88 s4:smb2srv: We only support SMB 2.002.
We need to loop over all given dialects and check
if we can find SMB2_DIALECT_REVISION_202.

metze
2009-05-26 09:50:45 +02:00
Stefan Metzmacher
01b05df766 s4:libcli/smb2: use new SMB2_DIVELECT_REVISION constants
Also send them in the order a windows client would
send them (the lowest first).

metze
2009-05-26 09:50:43 +02:00
Stefan Metzmacher
d0051462b9 s4:libcli/smb2: add some more SMB2 constants
metze
2009-05-26 09:39:25 +02:00
Kai Blin
c36031778e s3 WHATSNEW: Mention the changes to net 2009-05-26 09:26:56 +02:00
Andrew Tridgell
a9542ba21b use domain_dn not ncname
fixed up from previous patch that removed the use of crossref records
2009-05-26 14:47:11 +10:00
Andrew Tridgell
0299609308 Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-05-26 14:18:16 +10:00
Andrew Kroeger
c80c3b5edd s4:provision: Added ComPartitionSets entry.
Without this entry, opening the COM+ tab under the properties of an OU within
ADUC results in the following error:

"Unable to retrieve all user properties, 0x80072030"
2009-05-26 14:17:22 +10:00
Andrew Kroeger
95eeef91d3 s4:Added Extended-Rights and subentries.
Without these entries, using the 'Delegate Control' option in ADUC results in
the following error message in the Delegation of Control Wizard:

"The templates could not be applied.  One or more of the templates is not
applicable.  Click Back and select different templates, and then try again."
2009-05-26 14:17:12 +10:00
Andrew Kroeger
d402866e31 s4:provision: Update DisplaySpecifiers (#5139).
The classDisplayName attribute controls the actual text displayed to the user
for the top-level menus, so added it to the existing entries.

The attributeDisplayNames attribute contains both the text displayed to the
user and a mapping to the internal directory attribute name for the particular
field, so added these to the existing entries as well.

Added new entries as appropriate to properly complete all menus and labels
within ADUC.
2009-05-26 14:16:05 +10:00
Andrew Bartlett
6ef65389fd Don't use crossRef records to find our own domain
A single AD server can only host a single domain, so don't stuff about
with looking up our crossRef record in the cn=Partitions container.
We instead trust that lp_realm() and lp_workgroup() works correctly.

Andrew Bartlett
2009-05-26 12:37:09 +10:00
Andrew Bartlett
8603985575 Add support for sendmsg() in socket_wrapper
This is required because the deferred connect code skips the connect()
until sending the packet, but unless we catch this call, the connect()
never happens.

Andrew Bartlett
2009-05-26 12:37:09 +10:00
Andrew Tridgell
ecdad56b6e Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-05-26 09:26:47 +10:00
Andrew Tridgell
e15027155d added some more speed tests to tdbtool
This adds 3 simple speed tests to tdbtool, for transaction store,
store and fetch.

On my laptop this shows transactions costing about 10ms
2009-05-26 09:24:37 +10:00
Michael Adam
714acfac01 s3:dbwrap_tool: add listkeys operation
Michael
2009-05-26 00:51:41 +02:00
Michael Adam
11f0759900 s3:dbwrap_tool: remove superfluous command mapping
Michael
2009-05-26 00:51:40 +02:00
Michael Adam
dfe06d21bd s3:dbwrap_tool: add "erase" opearation
Michael
2009-05-26 00:51:40 +02:00
Kai Blin
fb262f79fa net: Use samba default command line arguments.
Attention:

The meaning of the -N flag changed.
To get the old meaning for net groupmap set, use the long option --ntname
The long option for using kerberos changed from --kerberos to --use-kerberos

net rpc commands will now prompt for a password if none is given.

As a benefit, net will now accept an authentication file like other samba
command line tools. So no need to specify the password on the command line in
scripts anymore.

This should fix bug #6357

Signed-off-by: Kai Blin <kai@samba.org>
2009-05-25 23:35:38 +02:00
Kai Blin
a98ba0cbe9 s3 ctags: ignore all proto.h files for tag generation 2009-05-25 23:35:37 +02:00
Michael Adam
3a853448ce s3:winbind_util: remove trailing spaces
Michael
2009-05-25 22:16:47 +02:00
Michael Adam
f5a5c6a5dc s3:dbwrap_ctdb: fix some function header comments
Michael
2009-05-25 22:16:46 +02:00
Slava Semushin
326237c4dd source3/utils/log2pcaphex.c(main): fixed file descriptors leak.
One of leaks found by cppcheck:
[./source3/utils/log2pcaphex.c:367]: (error) Resource leak: out
2009-05-25 16:25:57 +02:00
Slava Semushin
5d2cd81645 source{3,4}/torture/smbiconv.c(main): fixed file descriptor leak.
File descriptor leaks only when we use file instead of stdout.

Found by cppcheck:
[./source3/torture/smbiconv.c:219]: (error) Resource leak: out
[./source4/torture/smbiconv.c:211]: (error) Resource leak: out
2009-05-25 16:18:48 +02:00
Slava Semushin
95dbd7d6dc nsswitch/winbind_nss_aix.c(fill_grent): fixed memory leak.
Found by cppcheck:
[./nsswitch/winbind_nss_aix.c:241]: (error) Memory leak: result
2009-05-25 16:14:16 +02:00
Günther Deschner
4258750e4f s3-selftest: fix typo.
Guenther
2009-05-25 15:56:47 +02:00
Michael Adam
3111d78001 s3:winbind:idmap_ldap: warn about duplicate SID->XID mappings (bug #6387)
With the current infrastructure, we should not return error on
duplicate mappings but just warn instead (because an error would
trigger the attempt to create yet another mapping).

Michael
2009-05-25 14:57:06 +02:00
Michael Adam
35c3f4162d s3:winbind:idmap_ldap: warn about duplicate XID->SID mappings (bug #6387)
With the current infrastructure, we should not return error on
duplicate mappings but just warn instead (because an error would
trigger the attempt to create yet another mapping).

Michael
2009-05-25 14:57:06 +02:00
Günther Deschner
fca7dce1a9 s3-samr: Fix Bug #6372, usermanager only displaying 1024 groups and aliases.
This is now also verified with the RPC-SAMR-LARGE-DC test.

Guenther
2009-05-25 14:05:18 +02:00
Günther Deschner
f0139e3b69 s3-selftest: enable RPC-SAMR-LARGE-DC against Samba3.
This will fail for alias creation as nss_wrapper does not yet wrap around
libnss_winbind.

Guenther
2009-05-25 14:03:16 +02:00
Günther Deschner
eb5e8dc82e s4-smbtorture: add RPC-SAMR-LARGE-DC test.
This rather simple test creates 4500 objects on a domain controller and checks
the enum calls for the correct number of results.

Guenther
2009-05-25 13:56:54 +02:00
Günther Deschner
a75698bdf3 s4-smbtorture: rename test_EnumDomain{Users,Groups,Aliases} in RPC-SAMR.
Guenther
2009-05-25 13:56:54 +02:00
Günther Deschner
05e6ebb7f8 s4-smbtorture: re-work test_Create{User,Group,Alias} a little.
Guenther
2009-05-25 13:56:29 +02:00
Günther Deschner
1950e180ca s3-pamsmbpass: copy _pam_get_item and _pam_get_data from pam_winbind.
Guenther
2009-05-25 13:52:50 +02:00
Günther Deschner
86d087fccc s3-rpcclient: use get_domain_handle() fn in enum domain users & groups.
Guenther
2009-05-25 13:52:50 +02:00
Volker Lendecke
2d689ad9fc Attempt to fix a debian build problem 2009-05-25 12:43:22 +02:00
Karolin Seeger
f3df38362c s3/docs: Fix typos.
Thanks to Oota Toshiya <t-oota at dh.jp.nec.com> for reporting!

Karolin
2009-05-25 10:53:38 +02:00
Andrew Tridgell
b335618d17 fixed interpretation of ACB_PWNOTREQ
This bit actually means that we should ignore the minimum password
length field for this user. It doesn't mean that the password should
be seen as empty
2009-05-25 15:23:54 +10:00
Andrew Tridgell
4dcc058ea1 fixed the client side password change code
The client side code was not falling back to older routines correctly
as it didn't check for the operation range error appropriately. It
also used the old rpc semantics.
2009-05-25 13:40:52 +10:00
Andrew Tridgell
2bf1e8b5e1 cope with lanman auth being disabled in old password change code
When lanman auth is disabled and a user calls a password change
method that requires it we should give NT_STATUS_NOT_SUPPORTED
2009-05-25 13:39:56 +10:00
Volker Lendecke
5302db6326 TALLOC_FREE happily lives with a NULL ptr. Tim, please check!
Thanks,

Volker
2009-05-24 22:13:07 +02:00
Volker Lendecke
68c5c6df0e Fix a race condition in winbind leading to a panic
In winbind, we do multiple events in one select round. This needs fixing, but
as long as we're still using it, for efficiency reasons we need to do that.

What can happen is the following: We have outgoing data pending for a client,
thus

	state->fd_event.flags == EVENT_FD_WRITE

Now a new client comes in, we go through the list of clients to find an idle
one. The detection for idle clients in remove_idle_client does not take the
pending data into account. We close the socket that has pending outgoing data,
the accept(2) one syscall later gives us the same socket.

In new_connection(), we do a setup_async_read, setting up a read fde. The
select from before however had found the socket (that we had already closed!!)
to be writable. In rw_callback we only want to see a readable flag, and we
panic in the SMB_ASSERT(flags == EVENT_FD_READ).

Found using

bin/smbtorture //127.0.0.1/tmp -U% -N 500 -o 2 local-wbclient

Volker
2009-05-24 18:57:13 +02:00
Volker Lendecke
e744b0af68 use epoll for local-wbclient test 2009-05-24 13:51:32 +02:00
Volker Lendecke
7043ef2a79 Don't limit the number of retries in wb_trans.
This is better done with a tevent_req_set_endtime the caller should issue.
2009-05-24 13:51:07 +02:00
Volker Lendecke
f528dbcf2e Don't set a timeout deep inside wb_connect 2009-05-24 13:51:01 +02:00
Volker Lendecke
9de2efaa5b Change async_connect to use connect instead of getsockopt to get the error
On my Linux box, this is definitely the more reliable strategy with unix domain
sockets, and according to my tests it also works correctly with TCP sockets.
2009-05-24 13:50:54 +02:00
Volker Lendecke
4906d7fc67 Do queueing in wbclient.c
The _trigger fn must know about wbc_context, while we were waiting in the
queue the fd might have changed
2009-05-24 13:50:43 +02:00
Volker Lendecke
e337124c55 Fix closed_fd(): select returning 0 means no fd listening 2009-05-24 13:50:35 +02:00