1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00

17401 Commits

Author SHA1 Message Date
Günther Deschner
c3a5d90db4 r5541: Fix crash bug in the client-spoolss enumdataex-call.
With Windows2003 it's perfectly legal to receive no data when querying a
value-less subkey. Found while migrating printer settings.

Guenther
(This used to be commit 3e04def03377b2eae2987c87b18ccadf5b48a6fe)
2007-10-10 10:55:46 -05:00
Andrew Bartlett
8d06233d11 r5536: Avoid intermediate copy of NT and LM responses in NETLOGON client.
This copy was length-limited, which broke when the NTLMv2 response was
more than 128 bytes in length.

Andrew Bartlett
(This used to be commit bae18aaaff7f9eff90db566b9a254a11d281aa01)
2007-10-10 10:55:45 -05:00
Jeremy Allison
26d81332de r5535: Reformat so I can actually maintain this code and eventually convert to MB safe.
Jeremy.
(This used to be commit 0285754c1408b4155e115a5f76b1f5ff481c9d7e)
2007-10-10 10:55:45 -05:00
Jeremy Allison
f7decc6b23 r5532: Patch to detect infinite loops when traversing a tdb from "Shlomi Yaakobovich" <Shlomi@exanet.com>
Jeremy.
(This used to be commit f997c28bb8ca253dca943a578a617b3c20ccfa5e)
2007-10-10 10:55:45 -05:00
Jeremy Allison
cb203b2d1e r5530: Keep the TRANS call up to date with the NTCreateX call.
Jeremy.
(This used to be commit 98a07e1520d6fb1f6f5320bc70ac33d4c5052ea6)
2007-10-10 10:55:45 -05:00
Günther Deschner
051d9d7894 r5528: Expand the invalid-workstation-scheme. Workstation-Names with leading
'@'-sign are expanded on-the-fly as posix-groups of workstations. This
allows optional, more flexible login-control in larger networks.

Guenther
(This used to be commit 8f143b6800e0b6964c8ba4ba9607dc74da12ae59)
2007-10-10 10:55:45 -05:00
Günther Deschner
9fa9ca4f8b r5527: Allow own netbios name to be set in smbclient's session setup.
Guenther
(This used to be commit 3660b7e64d9a17bcaa4f43c6d782b0b1d52ed6ab)
2007-10-10 10:55:45 -05:00
Jeremy Allison
9150205f98 r5525: Add extra case to torture to test this (we currently fail with the wrong
error message but we correctly deny the open).
Jeremy.
(This used to be commit 99b89867c33a2209c42b6610d62ead0cf2af05af)
2007-10-10 10:55:45 -05:00
Jeremy Allison
e2cc3f4816 r5524: Don't do share mode checks on can_delete if open, the rest of the open
code will do this correctly. More for bug #2201.
Jeremy.
(This used to be commit faecf639efdecf949e91184d041489aa54e8664f)
2007-10-10 10:55:44 -05:00
Günther Deschner
0a063991a7 r5522: Better handling of LDAP over IPC connections that have expired on the
LDAP-Server.

Guenther
(This used to be commit 8017a7a150023dc3353181f7737b2363d38593fa)
2007-10-10 10:55:44 -05:00
Gerald Carter
ca9d4c13db r5521: allow smbclient to follow multiple leveles of dfs referrals (no loop checking currently)
(This used to be commit 3c09b1f30f8b85036c487fdaf7fca11886bc90d7)
2007-10-10 10:55:44 -05:00
Gerald Carter
1b0f75ddfb r5520: fix last remaining dfs issues with smbclient.
* all the unix extension commands should work
* send the correct TRANS2_FINDFIRST format to 2k to
  get a listing from a msdfs root share (tested against
  smbd as well).
* mkdir, rmdir, etc... all seem ok.

I'm sure bugs will pop up so keep testing.

Last thing I plan on doing is to clean up the horrible
mess with connection management in smbclient and global
variables (so i can move the cli_cm_xx() routines to a
separate file).
(This used to be commit 53d6a5f9d16aef4afc60b4b37b296b256da00dfd)
2007-10-10 10:55:44 -05:00
Gerald Carter
9cc7c62942 r5519: fix msdfs support for [m]get and [m]put
(This used to be commit 6a9e4d6af1a4a4f426189e71aac5a4e7e217d6f7)
2007-10-10 10:55:44 -05:00
Gerald Carter
01b87c63c9 r5518: Add initial msdfs support to smbclient. Currently I can only
cd up and down the tree and get directory listings.

Still have to figure out how to get a directory listing on a
2k dfs root.  Also have to work out some issues with relative paths
that cross dfs mount points.

We're protected from the new code paths when connecting to
a non-dfs root share ( the flag from the tcon&X is stored
in the struct cli_state* )
(This used to be commit e57fd2c5f00de2b11a2b44374830e89a90bc0022)
2007-10-10 10:55:44 -05:00
Gerald Carter
96a3fede40 r5517: code cleanup; rename the sorted_tree to pathtree (used by registry code)
I was going to use this for tracking dfs mounts in smbclient
but found another way.  Still the cleanup is valid so commiting it.
should be minimally disruptive since it is not widely used.
(This used to be commit 00738dca3b07083c91545910486a1f30f2b17281)
2007-10-10 10:55:43 -05:00
Jeremy Allison
34a5c5a580 r5513: Fix for bug #2201 - use same logic with "delete readonly"
when setting the delete on close flag as we do in SMBunlink
calls.
Jeremy.
(This used to be commit 7a94eaf1811c79ae52ee78b1cd9cfc691e1d65a0)
2007-10-10 10:55:43 -05:00
Günther Deschner
139ce45d7a r5511: Fix pipe-mismatch for NETDFS.
Guenther
(This used to be commit 1c8616618cf35a5aaef03b6e570d95d1a3e34e4e)
2007-10-10 10:55:43 -05:00
Jeremy Allison
14fc089bf5 r5510: Optimisation to only do can_delete check if client asks for FILE_SHARE_DELETE.
Not completely correct but will catch the XP SP2 problem.
Jeremy.
(This used to be commit 1e2d0fcdbb72735f8b53d9faaec07d711ae236d0)
2007-10-10 10:55:43 -05:00
Jeremy Allison
fcbb7b0e25 r5508: Typo - ZERO_STRUCT -> ZERO_STRUCTP.
Jeremy.
(This used to be commit 76e1d90aef45ccc089492d962e0f284e2e4d8e7a)
2007-10-10 10:55:43 -05:00
Jeremy Allison
6baedb3d3f r5497: Fix for DIR1 failures in build farm. It struck me that we
only care about failing with ACCESS_DENIED if we can't delete
with DELETE access requested. All other errors will be processed
as normal.
Jeremy.
(This used to be commit 360800592c55c9dd8fd787944b3d482f2b9eb951)
2007-10-10 10:55:43 -05:00
Gerald Carter
37ea9da1fd r5495: * add in some code from Mike Nix <mnix@wanm.com.au> for the SMBsplopen
and SMBsplclose commands (BUG 2010)
* clarify some debug messages in smbspool (also from Mike)

my changes:

* start adding msdfs client routines
* enable smbclient to maintain multiple connections
* set the CAP_DFS flag for our internal clienht routines.

I actualy have a dfs referral working in do_cd() but that code
is too ugly to live so I'm not checking it in just yet.
Further work is to merge with vl's changes in trunk to support multiple
TIDs per cli_state *.
(This used to be commit 0449756309812d854037ba0af631abad678e670e)
2007-10-10 10:55:43 -05:00
Volker Lendecke
0b451e5cab r5484: Fix a memleak
(This used to be commit 7b9cb0601ce465361618fcc2c88f8195d93f130a)
2007-10-10 10:55:42 -05:00
Volker Lendecke
f17c4ad8ae r5481: Fix a memleak
(This used to be commit 36bcfc5dae99868fc94ca01f902fec3d19926f5e)
2007-10-10 10:55:42 -05:00
Volker Lendecke
dc0ec44483 r5471: In cli_samr_lookup_rids, flags is not a flags but an array size. W2k3 rejects
everything but 1000 here, so there's no point in exposing that to the caller.

Thanks,

Volker
(This used to be commit 03ec1bd9e54b065c0494bc57a3d78ac0ae28e234)
2007-10-10 10:55:42 -05:00
Volker Lendecke
0d63de34ba r5469: Fix error codes of samr_lookup_rids: There's also STATUS_SOME_UNMAPPED.
Thanks,

Volker
(This used to be commit 43dcf0f5cb5dc2dd37ab3cdc2905970d9cc50ba4)
2007-10-10 10:55:42 -05:00
Volker Lendecke
a90a58ff22 r5467: Optimize _samr_query_groupmem with LDAP backend for large domains.
Could someone else please look at this patch, verifying that I did not break
the ldapsam:trusted = False fallback to the old behaviour? It works fine for
me, but you never know. You're certainly free to review the new code as well :-)

Thanks,

Volker
(This used to be commit e1c3ca182b299dc65da1fa39aadb69876b5e16b8)
2007-10-10 10:55:41 -05:00
Gerald Carter
8a10eb6d4e r5462: BUG 1549: patch from SATOH Fumiyasu <fumiya@samba.gr.jp> to fix trunction of service names
(This used to be commit 440a4ecc1641658a2553312b759b6b97a8e5c981)
2007-10-10 10:55:41 -05:00
Jim McDonough
96aaf64fa6 r5460: Fix "restrict anonymous = 1". If we have schannel connection, we must be
validated with a user, so allow it even if pipe itself had an anonymous
connection.
(This used to be commit 469a649ad7271159960335419fd3ce2633cf2c8b)
2007-10-10 10:55:41 -05:00
Jim McDonough
4e617c62c3 r5458: Generate a sane response to exceeding lookupsids limit. Truncate list to zero
and return NT_STATUS_NONE_MAPPED.  This does not crash windows and maintains
the benefit of not overallocating memory.  The previous response of
truncating to the MAX limit was not useful because it crashed lsass.exe on
windows (bug opened with MS), and it was also misleading the client to
believe that a complete answer was received.
(This used to be commit c03a93957404663bbd026668fb95d6c253524fe9)
2007-10-10 10:55:41 -05:00
Jim McDonough
80a514a6ef r5456: Increase limit of mapped SIDS to 0x5000, which is what 2k and later do.
NT has no limit.  We still don't respond the way 2k would to requests
larger, which is to actually allocate the memory and send back the entire
response, plus a return status of NT_STATUS_NONE_MAPPED.  Still looking
into ways of doing this without crashing windows.
(This used to be commit 9afe5acdc22adaed4b4b3d70ba3a1a7898256282)
2007-10-10 10:55:41 -05:00
Andrew Bartlett
acdf1aa308 r5455: Remove bogus DEBUG messages (dump for a failure to parse NTLMSSP,
before trying the alternate format).

This only caused confusion and bug reports...

Andrew Bartlett
(This used to be commit 5cb02b569b39aa7a9dc6692a79ff1d1dfa69aee6)
2007-10-10 10:55:40 -05:00
Günther Deschner
9bdf6cdbf1 r5444: Add adssearch.pl utility (on volkers request).
Added to samba3 due to some header and machine-account dependencies,
although it's possibly of more interest to samba4 developers.

adssearch.pl is a kind of ldapsearch + dump-filters for various
ADS-attributes. It can also register asynchronous change notifications.

./adssearch.pl -h w2k3host -D administrator@MY.REALM.NET -x -w mypass -n

and *any* change in your entire DIT will show up immediately (after a
second change of an object even as object diff). It's very interesting
to see the interaction of GPOs, the various steps of account
modification with dsa.msc, etc.

Gracefully ignore some parts of adssearch.pl that are rather immature...

Guenther
(This used to be commit fd947b5ee060a48597bc1166614a05f81457e5e0)
2007-10-10 10:55:40 -05:00
Gerald Carter
bfc76114f6 r5436: small merges from trunk
(This used to be commit f17ffdf805ef8afad2b8d63b619c52540001a546)
2007-10-10 10:55:40 -05:00
Gerald Carter
4e8c17d985 r5432: compile fixes from Jason Mader <jason@ncac.gwu.edu> -- BUGS 2340
(This used to be commit 3fd86a1f9d5b63aa066aed3347209913cdf782a8)
2007-10-10 10:55:40 -05:00
Gerald Carter
732f09990f r5431: couple of cimpile fixes from Jason Mader <jason@ncac.gwu.edu> -- BUGS 2341 & 2342
(This used to be commit 0edcfc7fa20fd8e3273b29c8f1a97cb7c7179fb6)
2007-10-10 10:55:40 -05:00
Volker Lendecke
f51677051c r5428: Apply some const. LDAP attribs should now be declared const char *attr[]. This
gives some new warnings in smbldap.c, but a the callers are cleaned up.

Volker
(This used to be commit 543799fc0ddc3176469acc1fab7093c41556d403)
2007-10-10 10:55:40 -05:00
Volker Lendecke
bc10e4067a r5421: Fix a memleak
(This used to be commit a7df3b5f06085d55cbf1e491aa606312b87e0448)
2007-10-10 10:55:40 -05:00
Volker Lendecke
96edc93c23 r5419: Fix some unitialized variable warnings
(This used to be commit 9004b7897416d142ab9e3bee60c7bda589f94750)
2007-10-10 10:55:39 -05:00
Gerald Carter
467da937c7 r5385: when operating in security = domain, allow domain admins to manage rigths assignments
(This used to be commit fec9cb7daa9b780aab019c0e0d7f2692c168019f)
2007-10-10 10:55:39 -05:00
Gerald Carter
9e52e989ab r5383: add missing checks to allow root to manage user rights
(This used to be commit ead54b14f6b34f087d3affc2853e16bbbaceb7cc)
2007-10-10 10:55:39 -05:00
Günther Deschner
21063efd05 r5379: Build-Fix (#2343)
Guenther
(This used to be commit 61ec0b4cf002cfb43ac137bf3e8f8b4877f25e50)
2007-10-10 10:55:39 -05:00
Gerald Carter
f9a28748cf r5359: BUG 2333: use the lpq command to pass in the correct printer name for cups_queue_get(). See comments in code for details
(This used to be commit 3eee00e0d0e9b58cdd35209691072b625813681c)
2007-10-10 10:55:39 -05:00
Jeremy Allison
70be7d7192 r5355: Fill in the access check code for POSIX ACLs to *really* fix bug #2227.
Jeremy.
(This used to be commit ecc134a2e3546ed77ab6f1dafc0249c78897e1f3)
2007-10-10 10:55:39 -05:00
Günther Deschner
6c84ecb556 r5349: After talking with Jerry, reverted the addition of account policies to
passdb in 3_0 (they are still in trunk).

Guenther
(This used to be commit fdf9bdbbac1d8d4f3b3e1fc7e49c1e659b9301b1)
2007-10-10 10:55:38 -05:00
Jeremy Allison
0f87a9ada3 r5343: Fix for bug#1525. Timestamps interpreted incorrectly on 64-bit time_t values.
Jeremy.
(This used to be commit 00f8ac509aaf2f40a067f5fe5c7699ae6f26571e)
2007-10-10 10:55:38 -05:00
Jeremy Allison
daa2d8bd1f r5342: Reformat some very old code.
Jeremy.
(This used to be commit 08553faeeb77aef46264f4dfe738bc202e87ea23)
2007-10-10 10:55:38 -05:00
Jim McDonough
803ace5bc7 r5339: Fix 'net rpc trustdom establish'. Use the right pipe name, therefore the
right pipe FID.  Fixes NT_STATUS_INVALID_HANDLE error.
(This used to be commit bfd9b9e99711abcaac80d98160723f5dc37b6917)
2007-10-10 10:55:38 -05:00
Gerald Carter
25edc545fc r5337: BUG 1439: make sure to initialize pointer to prevent invalide free()'s on exit
(This used to be commit a882a349df1488a4d64c892dbd1ec1ee3624ea42)
2007-10-10 10:55:38 -05:00
Gerald Carter
a309fed583 r5336: BUG 2329: fix to re-enable winbindd to locate DC's when 'disable netbios = yes'
(This used to be commit 75a223f1188ae0041c9e3c748af107d642f73810)
2007-10-10 10:55:38 -05:00
Volker Lendecke
aa9132cc55 r5331: Support SIDs as %s replacements in the afs username map parameter.
Add 'log nt token command' parameter. If set, %s is replaced with the user
sid, and %t takes all the group sids.

Volker
(This used to be commit e7dc9fde45c750013ad07f584599dd51f8eb8a54)
2007-10-10 10:55:37 -05:00