1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-15 23:24:37 +03:00

34716 Commits

Author SHA1 Message Date
Stefan Metzmacher
c0f9e963b6 s3:libsmb: add tstream_cli_np_set_timeout()
metze
2010-12-15 15:26:05 +01:00
Stefan Metzmacher
0df669e141 s3:libsmb: add tstream_cli_np_use_trans() and the needed logic
tstream_cli_np_use_trans() defers the next tstream_writev
to the next tstream_readv and send both as an SMBtrans request.

metze
2010-12-15 15:26:05 +01:00
Stefan Metzmacher
e08c324fc5 s3:libsmb: add tstream_is_cli_np()
metze
2010-12-15 15:26:05 +01:00
Stefan Metzmacher
c0ac1cebfb s3:libsmb: add cli_np_tstream.c
This abstracts a named pipe over smb as a tstream,
which will make it easier to implement the dcerpc
layer in a more generic way.

metze
2010-12-15 15:26:05 +01:00
Günther Deschner
af99f0a067 s3-waf: use shared libwbclient wscript_build.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Dec 15 11:42:16 CET 2010 on sn-devel-104
2010-12-15 11:42:16 +01:00
Günther Deschner
550046a4d9 s3-waf: fix winbind-client subsystem.
Guenther
2010-12-15 10:56:18 +01:00
Günther Deschner
7ecec74a00 s3-waf: add libkrb5 winbind locator plugin.
Guenther
2010-12-15 10:56:18 +01:00
Günther Deschner
5130e4a622 s3-waf: rework rpc_server handling a bit.
Guenther
2010-12-15 10:56:18 +01:00
Jeremy Allison
12e49a748c Protect the onefs sendfile from EAGAIN/EWOULDBLOCK.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Dec 15 03:26:43 CET 2010 on sn-devel-104
2010-12-15 03:26:43 +01:00
Jeremy Allison
a8eed184a0 Implement "use sendfile = yes" for SMB2. (cherry picked from commit 95cb7adcd03a1abbd0af395b6c96dd8e0eebd3d1)
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Dec 15 02:24:08 CET 2010 on sn-devel-104
2010-12-15 02:24:08 +01:00
Jeremy Allison
e071fd711d Fix read/write calls over sockets to cope with EAGAIN/EWOULDBLOCK for non-blocking sockets. 2010-12-15 01:38:16 +01:00
Jeremy Allison
14c70346fc Change interface of schedule_smb2_aio_read() to allocate the return DATA_BLOB.
Change smb2_read code to allocate return DATA_BLOB just before the read.

Preparing for SMB2 sendfile change which will not need to allocate
return buffer.

Jeremy
2010-12-15 01:38:16 +01:00
Günther Deschner
4bcedda7d8 s3-waf: libwbclient does not depend on talloc anymore.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Dec 15 00:50:08 CET 2010 on sn-devel-104
2010-12-15 00:50:07 +01:00
Günther Deschner
4f4f7694c1 s3-waf: add missing libnss_wins.so.2 library.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Tue Dec 14 23:29:25 CET 2010 on sn-devel-104
2010-12-14 23:29:25 +01:00
Günther Deschner
9e6736cafd s3-waf: recurse into ../libcli/ldap.
Guenther
2010-12-14 22:42:19 +01:00
Günther Deschner
3e6d507246 s3-waf: recurse into ../libcli/smb.
Guenther
2010-12-14 22:42:19 +01:00
Günther Deschner
f2bd9e52b8 s3-waf: recurse into ../libcli/samsync.
Guenther
2010-12-14 22:42:19 +01:00
Günther Deschner
baabd56ce9 s3-waf: recurse into ../libcli/named_pipe_auth.
Guenther
2010-12-14 22:42:19 +01:00
Günther Deschner
217ca2a2c9 s3-waf: recurse into ../libcli/drsuapi.
Guenther
2010-12-14 22:42:18 +01:00
Günther Deschner
d860281cd9 s3-waf: add pam_ and nss_winbind.
Guenther
2010-12-14 22:42:18 +01:00
Günther Deschner
a13b993237 s3-waf: check for "WITH_PAM_MODULES" to determine pam_smbpass build.
Guenther
2010-12-14 22:42:18 +01:00
Günther Deschner
1202e6328b s3-waf: fix pamsmbpass libwbclient dependency.
Guenther
2010-12-14 22:42:18 +01:00
Günther Deschner
906e489af9 s3-waf: recurse into ../libcli/auth.
Guenther
2010-12-14 22:42:18 +01:00
Günther Deschner
4c459a926f s3-waf: add CHARSET subsystem.
Guenther
2010-12-14 22:42:18 +01:00
Günther Deschner
943f485ef1 s3-waf: convert UTIL_SRC into a subsystem samba-util, similar to the s4 one.
Guenther
2010-12-14 22:42:17 +01:00
Günther Deschner
192838aafd s3-waf: convert lib/util_tdb.c into a subsystem.
Guenther
2010-12-14 22:42:17 +01:00
Günther Deschner
2407e33c76 s3-waf: use shared LIBASYNC_REQ subsystem.
Guenther
2010-12-14 22:42:17 +01:00
Björn Jacke
4fd57cbe1b s3/net: don't use external "date" to make "net time set" more portable
the "date" syntax is different for example on *BSD

Autobuild-User: Björn Jacke <bj@sernet.de>
Autobuild-Date: Tue Dec 14 15:31:03 CET 2010 on sn-devel-104
2010-12-14 15:31:03 +01:00
Jeremy Allison
0fe744078d Ensure we use vfs_fsp_stat(), not VFS_STAT directly, and store into fsp->fsp_name->st
instead of a SMB_STRUCT_STAT on the stack.

Jeremy.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Tue Dec 14 05:05:50 CET 2010 on sn-devel-104
2010-12-14 05:05:50 +01:00
Andrew Bartlett
d97492e42a s3-libsmb Improve error message when denying LM encryption
Now that 'client ntlmv2 auth = yes' is the default, make it more clear
what options a user may need to enable to get this to work.

Andrew Bartlett
2010-12-14 01:10:21 +01:00
Jeremy Allison
f974e68213 Change crediting so that the credits are returned on the interim async response.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Tue Dec 14 01:09:05 CET 2010 on sn-devel-104
2010-12-14 01:09:05 +01:00
Jeremy Allison
041428352c As we handle missing sendfile() inside lib/sendfile.c, remove the WITH_SENDFILE ifdefs.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Mon Dec 13 23:47:07 CET 2010 on sn-devel-104
2010-12-13 23:47:07 +01:00
Jeremy Allison
6ce365b238 We need to start off with smb2.credits_granted == 0. That way
when processing the faked up SMB2 NegProt from the SMB1 packet we
always allocate one credit on reply.

Jeremy.
2010-12-13 13:34:50 -08:00
Jeremy Allison
27a47eb9fc Remove extra unused credit arg. to smbd_smb2_request_setup_out() 2010-12-13 13:20:05 -08:00
Günther Deschner
a5cfdde558 s3-waf: try to fix the build with snow leopard.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Mon Dec 13 15:03:08 CET 2010 on sn-devel-104
2010-12-13 15:03:08 +01:00
Stefan Metzmacher
4ce3b53f12 s3:selftest: fix knownfail for samba3.posix_s3.rpc.spoolss.*printserver.enum_printers_old
The name is in lowercase since commit 35fbc7bbda5851f7172538f79fc79be201f1d521
(s4-smbtorture: Make test names lowercase and dot-separated.)

This should avoid intermittent failures in make test.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Dec 13 13:52:18 CET 2010 on sn-devel-104
2010-12-13 13:52:18 +01:00
Günther Deschner
a43a1d9226 s3-selftest: support differing VFSLIBDIR in autoconf and waf build.
With this change make test in the s3 waf build (w/o s4 smbtorture yet) works!

Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Mon Dec 13 13:06:05 CET 2010 on sn-devel-104
2010-12-13 13:06:05 +01:00
Günther Deschner
b4d398f8e3 s3-waf: add -Wl,--export-dynamic to LDFLAGS.
Our binaries did not export symbols so e.g. smbd could not load vfs modules.
Patch from tridge.

We might remove this later on, once we decide to resolve all symbols and fix all
dependencies in s3 modules.

Guenther
2010-12-13 10:53:42 +01:00
Jelmer Vernooij
35fbc7bbda s4-smbtorture: Make test names lowercase and dot-separated.
This is consistent with the test names used by selftest, should
make the names less confusing and easier to integrate with other tools.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
2010-12-11 04:16:13 +01:00
Jeremy Allison
2ac579ca76 Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to 128 credits.
Jeremy.
2010-12-10 15:46:41 -08:00
Andrew Tridgell
283686af75 s3-vfstest: fixed paths in vfstest
vfstest tries to create /messages.tdb as loadparm has not been
initialised
2010-12-10 08:46:16 +01:00
Andrew Bartlett
280caa6b3b s3-dns Don't use DELEG_FLAG in DNS update, Windows 2008R2 does not like it 2010-12-10 17:58:13 +11:00
Andrew Bartlett
0f1cc889a2 s3-dns Don't use SEQUENCE_FLAG in DNS update, Windows 2008R2 does not like it
Andrew Bartlett
2010-12-10 17:58:13 +11:00
Andrew Bartlett
c2a1ad9047 s3-net Allow 'net ads dns register' to take an optional hostname argument
This allows the administrator to more carefully chose what name to register.

Andrew Bartlett
2010-12-10 17:58:13 +11:00
Andrew Bartlett
6195dfc0eb s3-winbind Improve memory handling in NTLMv2-backend plaintext authentication
Andrew Bartlett
2010-12-10 16:09:06 +11:00
Andrew Bartlett
5cfe949108 s3-winbind Don't send the LM password to the server, ever
This is for the case where we have the plaintext password locally, and
can construct the challenge-response values here.

We should never ever use the LM password in domain authentication.
The last domain controller to only have LM passwords stored was NT
3.5.

Andrew Bartlett
2010-12-10 16:08:31 +11:00
Andrew Bartlett
f13404e27b s3-libsmb Don't ever ask for machine$ principals as a target.
It is never correct to ask for a machine$ principal as the target of a
kerberos connection.  You should always connect via the
servicePrincipalName.

This current code appears to have built up from a series of minimal
changes, as the codebase adapted the to lack of a SPNEGO principal
from Windows 2008.

Andrew Bartlett
2010-12-10 16:08:31 +11:00
Andrew Bartlett
635fbf2b54 s3-client Use NTLMv2 by default in the Samba client
This matches the improved security measures of Windows Vista.

Andrew Bartlett
2010-12-10 16:08:30 +11:00
Andrew Bartlett
b3c2df5e0d s3-smbd Don't send SPNEGO principal (rfc4178 hint) by default
This patch, based on the suggestion by Goldberg, Neil R. <ngoldber@mitre.org>
turns off the sending of the principal in the negprot by default, matching
Windows 2008 behaviour.

This slowly works us back from this hack, which from an RFC
perspective was never the right thing to do in the first place, but we
traditionally follow windows behaviour.  It also discourages client
implmentations from relying on it, as if they do they are more open to
man-in-the-middle attacks.

Andrew Bartlett
2010-12-10 16:08:30 +11:00
Andrew Bartlett
bb7806283e s3-libads Default to NOT using the server-supplied principal from SPNEGO
This principal is not supplied by later versions of windows, and using
it opens up some oportunities for man in the middle attacks.  (Becuase
it isn't the name being contacted that is verified with the KDC).

This adds the option 'client use spnego principal' to the smb.conf (as
used in Samba4) to control this behaivour.  As in Samba4, this
defaults to false.

Against 2008 servers, this will not change behaviour.  Against earlier
servers, it may cause a downgrade to NTLMSSP more often, in
environments where server names are not registered with the KDC as
servicePrincipalName values.

Andrew Bartlett
2010-12-10 16:08:30 +11:00