1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-15 23:24:37 +03:00

29068 Commits

Author SHA1 Message Date
Jeremy Allison
459dc8f39c Change access_check_samr_object -> access_check_object.
Make map_max_allowed_access global. Change lsa_get_generic_sd
to add Everyone:LSA_POLICY_READ|LSA_POLICY_EXECUTE, not just
LSA_POLICY_EXECUTE.
Jeremy.
2009-05-18 15:44:03 -07:00
Günther Deschner
d06051cc51 s3-lsa: let _lsa_OpenPolicy() just call _lsa_OpenPolicy2().
Guenther
2009-05-19 00:16:26 +02:00
Günther Deschner
9e741b34b2 s3-selftest: enable RPC-SAMR-USERS-PRIVILEGES.
Guenther
2009-05-18 23:36:57 +02:00
Jeremy Allison
ada1af41ea Fix SAMR server for winbindd access. Ensure we allow
MAX_ACCESS to be mapped to what we're giving Everyone.
Jeremy.
2009-05-18 14:26:37 -07:00
Günther Deschner
6ab0c83570 s3-lsa: let _lsa_GetSystemAccessAccount() call into _lsa_EnumPrivsAccount().
Inspired by lsa server from Samba 4.

Just removing a user in SAMR does not remove a user in LSA. If you use
usermanager from windows, the "User Rights" management gui gets unaccessable as
soon as you delete a user that had privileges granted. With this fix, that
no longer existing user would properly appear as an unknown account in the GUI
(as it does while using usermanager with windows domains).

This almost makes Samba3 pass the RPC-SAMR-USERS-PRIVILEGES test.

Guenther
2009-05-18 23:08:13 +02:00
Günther Deschner
4724fef897 s3-lsa: start a very basic implementation of _lsa_DeleteObject().
Certainly not the full story but this gets us closer to pass the
RPC-SAMR-USERS-PRIVILEGES test.

Guenther
2009-05-18 22:58:31 +02:00
Volker Lendecke
5fb3b8e377 Move down the become_root()/unbecome_root() calls into the VFS modules
The aio_fork module does not need this, as it does not communicate via signals
but with pipes. Watching a strace log with those become_root() calls in aio.c
is absolutely awful, and it does affect performance.
2009-05-18 13:38:56 +02:00
Volker Lendecke
bbbf9f13ad Fix bug 5681: Do not limit the number of network interfaces
Jeremy as far as I can see there is no real technical reason to limit the
number of interfaces. If you like this patch, can you please merge it to 3.4?
If you don't please tell me :-)

Thanks,

Volker
2009-05-18 13:38:55 +02:00
Volker Lendecke
67a2e62991 In aio_fork, we have to close all fd's, we might hold a gpfs share mode
Keeping such an fd open prohibits another open of that same file.
2009-05-18 10:42:22 +02:00
Volker Lendecke
22085c59cb Add "file_walk_table" to do stuff with all open files 2009-05-18 10:42:22 +02:00
Volker Lendecke
8b9c5f0483 Fix a race condition in vfs_aio_fork with gpfs share modes 2009-05-18 10:42:22 +02:00
Volker Lendecke
f140bf2e65 Fix broken pipe handling
Metze is right: If we have *any* error at the socket level, we just can
not continue.

Also, apply some defensive programming: With this async stuff someone else
might already have closed the socket.
2009-05-18 07:13:04 +02:00
Volker Lendecke
795b896ab0 Fix a type-punned warning 2009-05-18 07:13:04 +02:00
Bo Yang
aa70e44cd0 s3: tevent_req_poll() loops forever when pipe is broken
Signed-off-by: Bo Yang <boyang@samba.org>
2009-05-19 01:13:36 +08:00
Michael Adam
2722dd357c s3:fix bug #6371, unsuccessful net conf setparm leaves empty share
Wrap creation of share and setting of parameter into a transaction.

Michael
2009-05-17 22:19:24 +02:00
Volker Lendecke
834fc3786e s3-events: Not only timed, also immediate events generate a timeout return 2009-05-17 11:45:22 +02:00
Simo Sorce
4112bb2428 Move smb_create_user() in samsync
It is not used anywhere else, so make it also static and remove
it from proto.h
2009-05-16 15:30:48 -04:00
Volker Lendecke
31a2347a0a Fix static linking of vfs_notify_fam 2009-05-16 19:22:03 +02:00
Volker Lendecke
91aea36bbf Fix a typo 2009-05-16 19:22:03 +02:00
Volker Lendecke
ad91ef7f96 s3-events: If immediate requests are pending, the timeout is 0 2009-05-16 19:22:03 +02:00
Volker Lendecke
ebb79e27dc Fix the merged build -- thanks jelmer for the hint! 2009-05-16 19:22:03 +02:00
Jelmer Vernooij
6230eb94af Update copies of config.guess and config.sub. 2009-05-16 04:03:12 +02:00
Günther Deschner
dccecdf338 s3-privileges: add privilege_delete_account().
Guenther
2009-05-16 01:27:51 +02:00
Günther Deschner
118f343b05 s3-privileges: remove trailing whitespace from privileges codes.
Guenther
2009-05-16 01:27:51 +02:00
Jeremy Allison
0a8bb37fa2 Oops. Forgot to delete now unused local from the previous patch.
Jeremy.
2009-05-15 16:16:47 -07:00
Ole Hansen
ad7dca471a Fix bug #6359 - smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses 2009-05-15 16:13:59 -07:00
Michael Adam
f5c96e54c6 s3:build: fix linking with --disable-shared-libs
Michael
2009-05-15 23:46:02 +02:00
Jeremy Allison
8b4e491ab0 Ensure users with SeAddUser privs get full access to
groups/aliases when opening.
Jeremy.
2009-05-15 14:20:00 -07:00
Jeremy Allison
5adb3b8841 Add extra abilities for a user with SeAddUsers, so they
can manipulate groups and aliases.
Jeremy.
2009-05-15 13:36:43 -07:00
Jeremy Allison
2b784738d7 DeleteUser doesn't need the priv checks, this is done at OpenUser time.
Jeremy.
2009-05-15 13:13:01 -07:00
Günther Deschner
4027fde97c s3-samr: Fix samr access checks in _samr_RemoveMemberFromForeignDomain().
Guenther
2009-05-15 21:18:23 +02:00
Volker Lendecke
7d85bf2a42 Fix bug 6361: Make --rcfile work in smbget
Thanks to j scott <gl@arlut.utexas.edu> for reporting!
2009-05-15 21:05:31 +02:00
Jeff Layton
b0c399ce60 mount.cifs: directly include sys/stat.h in mtab.c
This file is mysteriously getting included when built via the makefile,
but when you try to build mtab.o by hand it fails to build. Directly
include it to remove any ambiguity.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
2009-05-15 14:31:28 -04:00
Günther Deschner
d800ee5033 s3-netdomjoin-gui: allow to switch between workgroups/domains with the same name.
Guenther
2009-05-15 19:51:03 +02:00
Günther Deschner
8c74d31962 s3-netdomjoin-gui: cosmetic fix for empty hostnames.
Guenther
2009-05-15 19:51:02 +02:00
Günther Deschner
473bf41d20 s3-netdomjoin-gui: only gray out labels when not root and not connecting to
remote machines.

Guenther
2009-05-15 19:51:02 +02:00
Michael Adam
c085c8311d s3:swat: hide "config backend" from swat
Michael
2009-05-15 18:01:40 +02:00
Michael Adam
00297b74ac s3:param: prevent includes from being dumped in dump_*() functions.
This fixes bug #4271: testparm should not print includes.

Michael
2009-05-15 17:00:22 +02:00
Michael Adam
a62e72b825 s3:build: add install-dbwrap_tool target
Michael
2009-05-15 17:00:22 +02:00
Michael Adam
b4131ecf81 s3:build dbwrap_tool with make everything
Michael
2009-05-15 17:00:21 +02:00
Günther Deschner
cd421ff2fc s3-samr: Fix samr access checks in _samr_SetUserInfo().
Guenther
2009-05-15 15:38:22 +02:00
Günther Deschner
7dcf5d4bcf s3-samr: Fix samr access checks in _samr_QueryUserInfo().
Guenther
2009-05-15 15:38:13 +02:00
Günther Deschner
59192bf03f s3-samr: in _samr_QueryUserInfo() make sure to not return any info in error case.
Guenther
2009-05-15 15:37:50 +02:00
Günther Deschner
0e9f03c727 s3-samr: Fix samr access checks in _samr_SetDomainInfo().
Guenther
2009-05-15 13:55:39 +02:00
Günther Deschner
140d4cabca s3-samr: Fix samr access checks in _samr_QueryDomainInfo().
Guenther
2009-05-15 13:55:32 +02:00
Günther Deschner
7d653ae277 s3-samr: use normal integer in r->in.level switch statements.
Guenther
2009-05-15 13:55:15 +02:00
Michael Adam
ad240e1998 s3:build: rename OBJ collection for dbwrap_tool consistently
Michael
2009-05-15 13:07:48 +02:00
Michael Adam
6d82b59755 s3:first cut at dbwrap_tool - a tdb tool that is CTDB-aware.
This tool (in contrast to tdbtool) reads Samba's configuration
and if clustering = yes, it talks to CTDB instead of accessing
the TDB data bases directly. This is done by simply using
the dbwrap mechanim, just like the Samba daemons.

This first version can read and write int32 and uint32 values
and delete records from a (c)tdb database.
More operations will follow.

This tool can already be useful in CTDB environments, e.g. when
"net idmap restore" fails to set the USER and GROUP HWM keys,
because the methods are deliberately not implemented in
idmap_tdb2.c. You can manually set the high water marks
with
"dbwrap_tool store idmap_tdb2.tdb 'USER HWM' int32 12345"
and
"dbwrap_tool store idmap_tdb2.tdb 'GROUP HWM' int32 67890"

Michael
2009-05-15 11:46:53 +02:00
Jeremy Allison
4dce2dfb5b Turn on SHORTNAME-TEST in torture.
Jeremy.
2009-05-14 16:49:34 -07:00
Jeremy Allison
ff9375a04c Make us pass SHORTNAME-TEST.
Jeremy
2009-05-14 16:49:18 -07:00