1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-17 02:05:21 +03:00

59966 Commits

Author SHA1 Message Date
Jeremy Allison
cb06eee86a srv_pipe.c doesn't reference current_user anymore. Remove it.
Jeremy.
2010-03-04 14:59:29 -08:00
Matthias Dieter Wallnöfer
13b1bf5d47 s4:auth/sam.c - change base context for the "tmp_ctx" context in "authsam_expand_nested_groups"
Better use the "res_sids_ctx" as base context for the "tmp_ctx" and not the
long-living "sam_ctx"/"ldb" context to prevent memory leaks.
2010-03-04 22:18:10 +01:00
Matthias Dieter Wallnöfer
3d94b28441 s4:ldap.py - give the "primaryGroupToken" test a better name
It tests also some other constructed attributes in a basic way.
2010-03-04 18:16:24 +01:00
Matthias Dieter Wallnöfer
4546b6b7df s4:ldap.py - add test for "tokenGroups" 2010-03-04 18:16:24 +01:00
Matthias Dieter Wallnöfer
8297302e98 s4:operational LDB - don't accidentally "ate" search helper attributes if we need them for more constructed attributes
With this patch we delete the helper attributes at the end where all constructed
attributes have already been computed.
2010-03-04 18:16:24 +01:00
Matthias Dieter Wallnöfer
ffa03820f1 s4:operational LDB module - make the counters unsigned
No need to have signed counters here.
2010-03-04 18:16:23 +01:00
Matthias Dieter Wallnöfer
bf94d68df8 s4:operational LDB - implement the "tokenGroups" constructed attribute
It contains the transitive SID closure (expand member/memberOf attributes) of a
certain SAM object. The "tokenGroups" attribute never contains the SID of the
object itself.

References: http://msdn.microsoft.com/en-us/library/ms680275(VS.85).aspx,
http://support.microsoft.com/kb/301916,
MS-ADTS 3.1.1.4.5.19.
2010-03-04 18:16:23 +01:00
Matthias Dieter Wallnöfer
1f371cdbe5 s4:sam.c - make "authsam_expand_nested_groups" public
This is needed by the "tokenGroups" work in the operational LDB module.
2010-03-04 18:16:22 +01:00
Matthias Dieter Wallnöfer
7587665d92 s4:sam.c - cosmetic indentation fix 2010-03-04 18:16:22 +01:00
Matthias Dieter Wallnöfer
0049c9ed1c s4:sam.c - change variable types to unsigned in "sids_contains_sid"
Should also be unsigned - no need for a signed "i" and "num_sids" here.
2010-03-04 18:16:22 +01:00
Matthias Dieter Wallnöfer
e34ee26169 s4:operational LDB module - use right memory context int "construct_primary_group_token"
Use the "msg" as temporary context and not "ldb" which lives much longer.
2010-03-04 18:16:21 +01:00
Karolin Seeger
bc2ff7abc9 Revert "s3:configure: add --enable-as-needed"
This reverts commit 22d316926b9589608d332143c1fa134229b75b3c.

Please see bug #7209 for details.
2010-03-04 16:19:33 +01:00
Nadezhda Ivanova
8cb416a0b5 Refactored ACL python tests
Made each type into a separate class to be easily run individually,
removed code duplication
2010-03-04 15:22:30 +02:00
Stefan Metzmacher
22d316926b s3:configure: add --enable-as-needed
On some broken systems like RHEL5, we need to be able
to disable --as-needed.

metze
2010-03-04 13:02:16 +01:00
Matthias Dieter Wallnöfer
af6f59468a s4:provision - use the new "interface_ips" python call to detect the right host IPv4 address
Inform the user when there are more possibilities (so he can check for the
right address and otherwise he is able to do an immediate reprovision) and no
possibility at all (then we fall back to the loopback address "127.0.0.1" - this
is thought for testing purposes).

I think this should be enough for closing bug #5484.
2010-03-04 10:38:36 +01:00
Matthias Dieter Wallnöfer
8a8c2de29f s4:ldif_handlers - Use "unsigned int" for counting purposes
I changed "uint32_t" to "unsigned int" since the LDB specification prescrives
"unsigned (int)" for counter variables (number of attributes,
number of values...).
2010-03-04 10:38:31 +01:00
Günther Deschner
a319eb9700 testprogs: add test_PrinterDataW.
Guenther
2010-03-04 10:10:02 +01:00
Günther Deschner
55946ddd1d testprogs: use dump_data in dump_printer_data.
Guenther
2010-03-04 10:10:02 +01:00
Günther Deschner
74ba0b7189 testprogs: add print_printer_dataw and dump_data to printlib.
Guenther
2010-03-04 10:10:02 +01:00
Günther Deschner
66b4463fc1 testprogs: add some multibyte versions of PrinterData calls.
Guenther
2010-03-04 10:10:02 +01:00
Bo Yang
6384f45f52 s3: Rerun genmsg after adding more strings.
Signed-off-by: Bo Yang <boyang@samba.org>
2010-03-06 01:59:55 +08:00
Bo Yang
ef0b4e4687 s3: Add i18n/l10n strings in pam_winbind.c coming from winbindd.
Signed-off-by: Bo Yang <boyang@samba.org>
2010-03-06 01:53:13 +08:00
Matthias Dieter Wallnöfer
fd00867e85 s4:samdb.c - Make it signed-safe
Use an unsigned argument for the numbers of groups and the counter "i" since
the function is called only by "auth_generate_session_info" with an unsigned
number of groups argument.
2010-03-03 20:15:25 +01:00
Matthias Dieter Wallnöfer
6a1a7ce9eb s4:srvsvc RPC - "srvsvc_create_ntvfs_connect"
Previous commit was incomplete. The "service" parameter in the "tcon" structure
should point to "scfg->name". I'm not sure if "share" is right but the first
was used before commit f390daef475126b4ff5a3d0ffd2babbd87d4c22b.
2010-03-03 20:15:25 +01:00
Matthias Dieter Wallnöfer
9b4d208ce8 s4:srvsvc RPC - fix up the "ntvfs_connect" in "srvsvc_create_ntvfs_connect"
This should be the right fix (set the service name in the tcon union to the
share name/path). That should be the solution for bug #6784.
2010-03-03 18:43:23 +01:00
Matthias Dieter Wallnöfer
a21b49bb38 s4:torture/rpc/samr - Fix up SAMR-USERS test
"QueryDomainInfo" returns only global groups, "QueryDisplayInfo" also universal
ones. Consider MS-SAMR 3.1.5.5.1.1 and 3.1.5.3.1.
2010-03-03 17:45:58 +01:00
Matthias Dieter Wallnöfer
051eb0b575 s4:torture/rpc/samr - enhance the "EnumDomainGroups" test regarding universal groups
Find the "Enterprise Admins" group which does exist on s4 and Windows
directories and is always per default universal. Test this only when the target
is set to s4 (s3 deployments don't contain this group). If the number of
returned objects is "0" (count) then we are likely testing the builtin domain of
an AD deployment.Then we ignore the inexistent "Enterprise Admins" group.

I didn't enhance the test for "QueryDomainInfo" since this does itself a
comparison of all returned objects with the "EnumDomainGroups" call. Therefore
if the latter passes, and the "QueryDomainInfo" test passes also the
"QueryDomainInfo" call is okay regarding groups.
2010-03-03 17:20:01 +01:00
Matthias Dieter Wallnöfer
8d0fbfe987 s4:dcesrv_samr - Also "OpenGroup" needs to support universal groups 2010-03-03 17:15:31 +01:00
Matthias Dieter Wallnöfer
f92c28bf4e s4:dcesrv_samr - Fix up "EnumDomainGroups" and "QueryDisplayInfo" calls
We need to look for both global and universal group types when querying them.
Found by ekacnet (http://lists.samba.org/archive/samba-technical/2010-March/069777.html).
2010-03-03 17:15:31 +01:00
Karolin Seeger
340797f3fa Fix typo in comments. 2010-03-03 16:03:13 +01:00
Günther Deschner
892213c7b7 testprogs: fix boolean return code of test_PrinterData.
Guenther
2010-03-03 14:42:31 +01:00
Andrew Tridgell
d8ae32ec41 dns: make dns update script use unbuffered IO
Otherwise we can lose debug output when a timeout happens
2010-03-03 23:05:23 +11:00
Andrew Tridgell
8fe783edaf s4-posix: allow change ownership of files if the user has the right privileges
When a user has SEC_PRIV_TAKE_OWNERSHIP or SEC_PRIV_RESTORE they have
permission to change the ownership of a file.

This should fix bug 6987

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-03-03 23:05:23 +11:00
Matthieu Patou
e0726d4d66 s4-build: fix SMB_LIBRARY and change its name so it didn't collide with s3 one
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-03 09:22:40 +01:00
Matthieu Patou
92785f9af6 s3: Fix build file due to file move. Use the new path of iniparser
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-03 09:22:39 +01:00
Matthieu Patou
b953c4c67c s3: Move source3/iniparser to lib/iniparser to allow sharing between s3/s4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-03 09:22:39 +01:00
Matthieu Patou
1af5a6d359 s3: Allow pam_winbind.c to build without localedir.c
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-03 09:22:38 +01:00
Matthieu Patou
db6781833d nsswitch: libpam remove depedance on locale.h use directly LOCALEDIR
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-03 09:22:38 +01:00
Andreas Schneider
3f946240fa s4-winrepl: Migrated the wins replication server to tsocket.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-03 09:22:37 +01:00
Michael Adam
27ae935a8d s3:net: add a command "net registry setsd_sdd"
This permits to set the security descriptor of a registry
key from the unix command line.

Michael
2010-03-03 09:16:38 +01:00
Michael Adam
6f4bdbccf7 s3:net: fix some i18n messages in net_registry_getsd_internal().
Michael
2010-03-03 09:16:38 +01:00
Michael Adam
d8b828d4a9 s3:net: add i18n macro _() to one message
Michael
2010-03-03 09:16:38 +01:00
Michael Adam
caa27bb165 s3:net: add new subcommand "net registry getsd_sddl" to print secdesc in sddl format
Michael
2010-03-03 09:16:37 +01:00
Michael Adam
93d438d970 s3:net: refactor getting of secdesc out of net_registry_getsd()
New net_registry_getsd_internal does the work(),
net_registry_getsd() just prints the result.
This in preparation to add support for other output formats
than the currently used display_sec_desc().

Michael
2010-03-03 09:16:36 +01:00
Michael Adam
9cea4d5969 s3:smbcacls: add switch "--sddl" to output acls as sddl encoded strings 2010-03-03 09:16:35 +01:00
Michael Adam
6fa767fbb2 s3: build sddl.c in samba3 2010-03-03 09:16:35 +01:00
Michael Adam
f37030b33a libcli/security: fix sddl.c to be able to build it from source3 2010-03-03 09:16:34 +01:00
Michael Adam
15b60a7e3f s4:move the sddl code down to the top level
Michael
2010-03-03 09:16:34 +01:00
Kamen Mazdrashki
5338e42182 s4/ildap: fine tune ildb_callback()
Actually ildb_context pointer is not supposed to be
valid after calling ildb_request_done().
This is due to the fact that when calling ildb_request_done()
caller will (most probably) free any locally built
ldap_request objects - thus rendering ildb_context invalid.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-03-03 13:18:38 +11:00
Holger Hetterich
e3c2e1a303 s3: net_share.c: fix argc handling
The "net share" command was no longer possible because it enters
the net_share function with argc == 0.
2010-03-02 15:27:58 -08:00