1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Commit Graph

82718 Commits

Author SHA1 Message Date
Michael Adam
243157ae34 s3: in sys_popen(), validate input before opening the pipe. 2012-09-04 20:39:20 +02:00
Michael Adam
e7d385c366 s3: in sys_popen(), fix a debug message 2012-09-04 20:39:20 +02:00
Michael Adam
b1966f3118 s3:smbd: in sys_disk_free(), improve a debug message 2012-09-04 20:39:20 +02:00
Michael Adam
cc99189de1 s3:smbd: in sys_disk_free(), improve a debug message 2012-09-04 20:39:20 +02:00
Michael Adam
04ac781626 s3:smbd: in sys_disk_free(), fix line length and indentation of debug statement 2012-09-04 20:39:20 +02:00
Michael Adam
a56d2dea06 s3:smbd: in sys_disk_free(), fix a debug message 2012-09-04 20:39:20 +02:00
Andreas Schneider
3390d9902a s3-winbind: DON'T PANIC if we couldn't find the domain.
If we don't have a connection to a trusted domain but still try to do a
lookup we shouldn't segfault.

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Tue Sep  4 18:16:06 CEST 2012 on sn-devel-104
2012-09-04 18:16:06 +02:00
Andrew Bartlett
4def1c1780 file_server: Remove explicit set of passdb backend in fileserver.conf
The default is now set during smb.conf loading based on the server role
or during provision.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Sep  4 14:05:34 CEST 2012 on sn-devel-104
2012-09-04 14:05:34 +02:00
Andrew Bartlett
7afd476fe4 build: sync the waf ACL checks with configure.in
This should give us full ACLs on the same set of hosts that the autoconf build supports.

Andrew Bartlett
2012-09-04 20:16:49 +10:00
Andrew Bartlett
a566404362 build: Remove references to charset modules - we no longer have these 2012-09-04 20:16:49 +10:00
Andrew Bartlett
cac1ebfff6 build: vfs_fake_acls does not need the acl lib 2012-09-04 20:16:49 +10:00
Andrew Bartlett
73932a3aa4 file_server: Run task_server_terminate when smbd exists
This will help us shut down when smbd cannot bind to ports or perform
some other critical startup operation.

Based on a patch by Stefan Metzmacher <metze@samba.org>

Andrew Bartlett
2012-09-04 20:16:48 +10:00
Stefan Metzmacher
8d3e193fa1 file_server: use 'subreq' as variable instead of 'req'
This matches the style of all other tevent_req users.

metze
2012-09-04 20:16:48 +10:00
Andrew Bartlett
2c9c58993c build: remove unused HAVE_NO_ACLS define 2012-09-04 20:16:48 +10:00
Andrew Bartlett
4437547afa s4-selftest: Try a more complex ACL - this example from a GPO
Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Sep  4 11:30:17 CEST 2012 on sn-devel-104
2012-09-04 11:30:17 +02:00
Andrew Bartlett
97a1f8d20b s4-selftest: Try to make ntacl unit tests better match their names
We are trying to test combinations of setting and getting via the VFS
and directly to the underlying DB.

Andrew Bartlett
2012-09-04 09:52:23 +02:00
Andrew Bartlett
6c9d22d1ed file_server: Clarify code by avoiding a goto
As suggested by Ricky Nance <ricky.nance@weaubleau.k12.mo.us>

Andrew Bartlett
2012-09-04 09:52:23 +02:00
Andrew Bartlett
30253c11cc s4-samba-tool: Ensure we also sync the SACL as well as the DACL during sysvolreset 2012-09-04 09:52:23 +02:00
Andrew Bartlett
9983ad7a80 s3-passdb: Rename pdb_samba4 to samba_dsdb and autoconfigure when we are a AD DC
The name samba_dsdb is not ideal, but it matches the primary ldb
module we use, and more importantly it avoids having '4' in the name.
We should slowly avoid using the term samba4 in long-term places like
the smb.conf because it is confusing to users given we are shipping
Samba 4.0 as an AD DC as well as all the other supported roles (domain
member/standalone server/classic DC)

Additionally, samba4 will be an odd name when we eventually release
Samba 5.0!

samba4 remains accepted as an alias to ensure existing smb.conf files
load, but to allow changes here in the future, we set the value during
the smb.conf load, and not during the provision when we are an AD DC.

This simplifies the default smb.conf for the vast majority of our
users and reduces the number of things listed in smb.conf files that
we later have to work around if we wish to change the
name/implementation of the passdb glue module again.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Sep  4 04:45:16 CEST 2012 on sn-devel-104
2012-09-04 04:45:16 +02:00
Andrew Bartlett
68f68d0152 docs: Move Samba4 HOWTO link into README
This allows us to make clear that it applies to the AD DC deployment.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Sep  4 03:05:02 CEST 2012 on sn-devel-104
2012-09-04 03:05:02 +02:00
Andrew Bartlett
8be652a675 docs: Update Roadmap 2012-09-04 09:31:49 +10:00
Andrew Bartlett
3f42619e80 docs: Remove merged-branches.txt
We are now well past simply having two projects in once tree, and each
continued reference to 'samba3' and 'samba4' causes user confusion.

Andrew Bartlett
2012-09-04 09:31:49 +10:00
Andrew Bartlett
00108282d0 docs: Remove docs for removed parameter 'display charset' 2012-09-04 09:31:49 +10:00
Andrew Bartlett
339fb7ef61 remove extra tab from Makefile 2012-09-04 09:31:49 +10:00
Andrew Bartlett
f9e8f08197 docs: Fix undocumented target to find smb.conf directives in the right place
The manpages target needs to be reworked to know about waf.

Andrew Bartlett
2012-09-04 09:31:49 +10:00
Andrew Bartlett
28499b0476 docs: Remove references to security=share and security=server from the smb.conf docs 2012-09-04 09:31:48 +10:00
Andrew Bartlett
4a52a3f48d docs: Remove docs for removed parameter 'parinoid server security' 2012-09-04 09:31:48 +10:00
Karolin Seeger
75484f4911 docs: Rename manpages-3 -> manpages.
This change was suggested by Andrew Bartlett on the samba-technical mailing
list.

Karolin

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Mon Sep  3 23:35:38 CEST 2012 on sn-devel-104
2012-09-03 23:35:37 +02:00
Karolin Seeger
9c44e2e539 s4-docs: Remove empty s4 HOWTO Collection.
This change was proposed by Andrew Bartlett on the samba-technical mailing list.

Karolin
2012-09-03 21:05:22 +02:00
Andrew Bartlett
18c0d872d1 build: skip shipping the alpha13 provision in the release tarballs
This test is important, but it is not important enough to include this volume of data
in every tarball.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Mon Sep  3 13:01:58 CEST 2012 on sn-devel-104
2012-09-03 13:01:58 +02:00
Andrew Bartlett
2dd0e7141f s4-classicupgrade: Show more clearly what is wrong with the Adminstrator SID 2012-09-03 19:24:10 +10:00
Andrew Bartlett
3b3d7bb602 build: Only make bin/ if it does not exist 2012-09-03 19:24:10 +10:00
Andrew Bartlett
3ad9c52b14 selftest: skip tests if the tarball did not include the alpha13 provision 2012-09-03 19:24:10 +10:00
Björn Jacke
05f9829ab5 waf: add new quota header checks and sysquota_4B source file
Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Sun Sep  2 23:21:22 CEST 2012 on sn-devel-104
2012-09-02 23:21:22 +02:00
Björn Jacke
9dd0e1608e s3: remove some duplicate quota code 2012-09-02 21:44:54 +02:00
Björn Jacke
af5dcaa740 s3: adopt the new sysquotas_4B support for BSD
most BSD systems have ufs/ufs/quota.h and they count the quota in blocks, not
bytes and have slightly different dqblk struct members.
2012-09-02 20:58:58 +02:00
Björn Jacke
d392485919 s3: add sysquotas_4B support
this is from James Peach's darwin patch, that exists since a couple of years
already.

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Sun Sep  2 01:00:41 CEST 2012 on sn-devel-104
2012-09-02 01:00:40 +02:00
Volker Lendecke
d5f845c0d3 s3: Make an if statement a bit easier to read
Fix indentation a bit

Signed-off-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Sat Sep  1 07:07:12 CEST 2012 on sn-devel-104
2012-09-01 07:07:12 +02:00
Jeremy Allison
5e0365dfe8 Now SEC_RIGHTS_PRIV_RESTORE and SEC_RIGHTS_PRIV_BACKUP don't include any generic bits (they're used directly in the fileserver where the generic bits have already been mapped into file specific bits) we need to add the generic bits to the test when we have these privileges.
Mark samba4.base.maximum_allowed knownfail until we implement NTCREATEX_OPTIONS_BACKUP_INTENT.
2012-08-31 20:32:37 -07:00
Jeremy Allison
6550bc0d26 Rewrite torture_samba3_rpc_sharesec() to use a non-privileged user for share security descriptor testing. 2012-08-31 20:29:13 -07:00
Jeremy Allison
64e57a1770 Add a comment showing where to set log level in tests. 2012-08-31 20:29:13 -07:00
Jeremy Allison
46455642a7 Change the S3 fileserver over to se_file_access_check().
Don't set the priv_open_requested yet until the open-for-backup
request is correctly passed in.
2012-08-31 20:29:13 -07:00
Jeremy Allison
2b89e1a20a Factor out privilege checking code into se_file_access_check() which takes a bool priv_open_requested parameter. 2012-08-31 20:29:13 -07:00
Jeremy Allison
69d925d110 SEC_RIGHTS_DIR_PRIV_BACKUP and SEC_RIGHTS_DIR_PRIV_RESTORE aren't used anywhere. Remove (can re-add if needed).
Ensure the privilege rights are always specific rights, not generic.
By the time the privilege rights are examined, we've already mapped
from generic to specific in the access_mask.
2012-08-31 20:29:13 -07:00
Andrew Bartlett
4d7dad1315 s4-dsdb: Remove unused variables
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Sat Sep  1 05:10:47 CEST 2012 on sn-devel-104
2012-09-01 05:10:47 +02:00
Andrew Bartlett
8557c692f6 s4-kdc: Improve grammer and clarity of password change failure messages.
This can still be improved further, but avoid mentioning reasons that
clearly do not apply in this case.

Andrew Bartlett
2012-09-01 03:33:21 +02:00
Volker Lendecke
f0a9180ae9 s3: Fix warnings in aio_fork.c 2012-09-01 03:33:21 +02:00
Volker Lendecke
2ffe69082e s3: Remove a shadowing variable declaration 2012-09-01 03:33:21 +02:00
Andrew Bartlett
01ade93c7c s4-dsdb: Remove unused tmp_ctx leaked onto long-term ldb_context
This was found based on a log provided by Ricky Nance
<ricky.nance@weaubleau.k12.mo.us>.  Thanks Ricky!

Andrew Bartlett
2012-09-01 03:33:20 +02:00
Kai Blin
c256566aa9 s4 dns: Store TKEYs in a ringbuffer
This stops us from potentially being DoSed by tons of TKEYs

Autobuild-User(master): Kai Blin <kai@samba.org>
Autobuild-Date(master): Fri Aug 31 22:46:01 CEST 2012 on sn-devel-104
2012-08-31 22:46:01 +02:00