1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

57 Commits

Author SHA1 Message Date
Andrew Bartlett
db44f35fc3 param: harmonise wins parameters 2012-04-16 14:35:34 +10:00
Andrew Bartlett
2bc8999266 lib/param: swap preferred name for 'lock dir' to match s3 2012-04-16 14:35:34 +10:00
Andrew Bartlett
3bb7cbf798 param: Merge common param elements by adding .flags
This removes the difference between many of the key elements of the global
parameters table, and makes it easier to merge the two tables.

Andrew Bartlett
2012-04-16 14:35:31 +10:00
Andrew Bartlett
acb64471b3 param: harmonsise logfile parameter 2012-04-16 14:32:37 +10:00
Andrew Bartlett
fed2380ac5 param: Merge common param elements by adding .flags
This removes the difference between many of the key elements of the global
parameters table, and makes it easier to merge the two tables.

Andrew Bartlett
2012-04-16 14:32:29 +10:00
Christian Ambach
2a36408d40 s3:param convert kernel oplocks to share parameter
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-04-11 11:11:39 -07:00
Kai Blin
06dd4d8ee1 s4 dns: Check smb.conf if we should allow recursion 2012-03-27 16:03:16 +02:00
Andrew Bartlett
d7bb961859 s3-auth: Remove security=share (depricated since 3.6).
This patch removes security=share, which Samba implemented by matching
the per-share password provided by the client in the Tree Connect with
a selection of usernames supplied by the client, the smb.conf or
guessed from the environment.

The rationale for the removal is that for the bulk of security=share
users, we just we need a very simple way to run a 'trust the network'
Samba server, where users mark shares as guest ok.  This is still
supported, and the smb.conf options are documented at
https://wiki.samba.org/index.php/Public_Samba_Server

At the same time, this closes the door on one of the most arcane areas
of Samba authentication.

Naturally, full user-name/password authentication remain available in
security=user and above.

This includes documentation updates for username and only user, which
now only do a small amount of what they used to do.

Andrew Bartlett

                       --------------
                      /              \
                     /      REST      \
                    /        IN        \
                   /       PEACE        \
                  /                      \
                  |      SEC_SHARE       |
                  |    security=share    |
                  |                      |
                  |                      |
                  |       5 March        |
                  |                      |
                  |        2012          |
                 *|     *  *  *          | *
        _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-03-04 23:33:05 +01:00
Andrew Bartlett
c318c94170 s3-param: Align lp_{max,min}protocol with lib/param names
This adds an alisas to ensure that both our loadparm systems know all
the names.

I would like to move to the 'server ..' name as canonical, and this
will be raised on the list.

Andrew Bartlett
2012-02-27 07:36:05 +01:00
Jelmer Vernooij
8f6d7d6cbf loadparm: handle P_SEP in switches (silences warning with clang). 2012-02-07 01:11:07 +01:00
Andrew Bartlett
39ee332f35 param: handle P_BYTES in more places 2012-01-21 11:32:06 +01:00
Stefan Metzmacher
d7dcbcc42d lib/param: avoid talloc_reference() in copy_service()
The memory reduction compared of talloc_reference() over talloc_strdup()
is typically very low. As the strings are typically short compared
to the talloc header overhead.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 11 16:13:50 CET 2012 on sn-devel-104
2012-01-11 16:13:50 +01:00
Andrew Bartlett
4b7b26e3c0 gensec: Allow an alternate set of modules to be specified
This will allow s3 to specify modules to use as a list, rather than
needing to start the individual module with gensec_start_mech_by_ops()

Andrew Bartlett
2011-12-28 22:39:19 +11:00
Stefan Metzmacher
d855e77c69 lib/param: add support for "SMB2_24" in smb.conf options
metze
2011-12-22 15:58:46 +01:00
Amitay Isaacs
8303d163cf param: domain_logons and domain_master are of type enum_bool_auto
These parameters should be defined as int and not bool. This fixes
the test failures on big endian machines.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Thu Dec 22 10:37:42 CET 2011 on sn-devel-104
2011-12-22 10:37:42 +01:00
Amitay Isaacs
cd772e9bd8 param: Fix the data type for bAvailable
This causes the copy_service() to not copy bAvailable boolean on
big endian machines causing tests to fail.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Thu Dec 22 05:30:49 CET 2011 on sn-devel-104
2011-12-22 05:30:49 +01:00
Kai Blin
b1fdf4065e s4 dns: Allow updates based on smb.conf setting
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Sat Dec 17 04:19:40 CET 2011 on sn-devel-104
2011-12-17 04:19:40 +01:00
Andrew Bartlett
d62de8d83e lib/param: Set s4 "host msdfs = true" by default
This matches the s3 loadparm, and makes this feature available
by default for our users in a DC environment.  (This is needed
for the correct operation of GPOs).

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Dec 16 01:08:34 CET 2011 on sn-devel-104
2011-12-16 01:08:34 +01:00
Andrew Tridgell
77a551d613 loadparm: fixed service list handling
when you have:

  server services = +smb -s3fs

and 'smb' is already in the list, then this should not be an
error. This ensures that a config that specifically sets the services
it wants doesn't generate an error if the service list being set
happens to be the default
2011-12-15 23:36:22 +01:00
Dave Craft
a3613b0533 Add samba_kcc load parameter
Configures parameter to enumerate name of python KCC
topology generator for subsequent use by samba_runcmd_send()
invocation from kcc task

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-12-08 11:48:17 +11:00
Stefan Metzmacher
d3ded49b06 lib/param: add "SMB2_22" to enum_protocol
metze
2011-11-20 15:10:08 +01:00
Andrew Bartlett
cd23028ed0 lib/param simplify server role values specified in smb.conf
The pdc/bdc split is only in smb.conf for Samba3 DCs, and so is
too confusing to document in this paramter.  It will be clearer
to sort out "domain master" into a "pdc emulator" paramter
to conver this distinction.

Andrew Bartlett
2011-11-17 00:34:09 +01:00
Andrew Bartlett
eb4fa13fd9 param: use lp_is_security_and_server_role_valid()
This also permits a few more valid combinations, due to the layer at which this is
being used.

Andrew Bartlett
2011-11-17 00:34:09 +01:00
Amitay Isaacs
e743fbc26e param: Check if server role and security parameters are conflicting 2011-11-17 00:34:09 +01:00
Andrew Bartlett
3ac3de73b4 param: Connect lp_security to the lib/param code to allow tests
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:09 +01:00
Andrew Bartlett
15b8cfcd83 param: Move enum values into a common (included) .c file
This #include hack is required as it is not possible to declare a
compile-time sized array in a header file.

Andrew Bartlett

Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:09 +01:00
Andrew Bartlett
1f96a59dda param: move server role helpers into loadparm.h
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:08 +01:00
Andrew Bartlett
9524e2fce1 param: calculate server role from security, and security from server role
This allows smb.conf files from either the samba3 or samba4 tradition
to come to the same value of server role, using the information in the
smb.conf file.

This is important so that tools like 'net getlocalsid' work against a
Samba4 AD installation (yes, users have tried this).

Andrew Bartlett

Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:08 +01:00
Andrew Bartlett
f099feaa01 s3-param remove lp_domain_logons(), always use IS_DC
This makes the code internally consistant.

Andrew Bartlett

Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:08 +01:00
Andrew Bartlett
df9a1ea6cb param: make server role list common and include auto (for the new default)
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17 00:34:08 +01:00
Amitay Isaacs
7b175e875e param: Add "domain logons" and "domain master" parameters
This makes parsing of config files with s3 loadparm code and s4 loadparm
code consistent.
2011-11-17 00:34:08 +01:00
Amitay Isaacs
7af51ca936 param: Remove duplicate initialization of 'share backend' parameter 2011-11-08 02:58:06 +01:00
Stefan Metzmacher
4d819389f2 lib/param: use SMB_SIGNING_IF_REQUIRED instead of SMB_SIGNING_SUPPORTED
metze
2011-11-03 16:55:12 +01:00
Stefan Metzmacher
53c926c1eb lib/param: map "* signing = auto" to SMB_SIGNING_SUPPORTED
metze
2011-11-03 16:55:11 +01:00
Stefan Metzmacher
71959d5e1f s4:smb_server: change the default for "server signing" to "default"
metze
2011-11-03 16:55:11 +01:00
Stefan Metzmacher
908550f3c2 lib/param: change the default for "client signing" to "default"
metze
2011-11-03 16:55:11 +01:00
Amitay Isaacs
8df2ed42cc s4-dns: Added DCERPC dns server for DNS management
dnsserver.h - typedefs and prototypes
dnsserver.c - RPC API and implementation methods
dnsdb.c     - samdb operations
dnsdata.c   - functions to manipulate dns structures
dnsutils.c  - function for serverinfo and zoneinfo structures

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-10-20 05:53:05 +02:00
Andrew Bartlett
5954a37997 lib/param: Remove parameters for wins and spoolss databases
This removes the smb.conf parameters per-database, replacing these
with hard-coded database names in well known (and configurable)
directories.

The wins.ldb is now always in the "state dir", rather than being in
both state and lock dir (ie, a bug).

Less smb.conf parameters means less parameters to try and sync up
between the loadparm subsystems.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Oct 18 05:39:54 CEST 2011 on sn-devel-104
2011-10-18 05:39:54 +02:00
Andrew Bartlett
734e5c521c credentials: Prioritise command-line specified options above defaults from smb.conf
If a user specified -W or --realm on the command line, then this is
of level SPECIFIED, not UNINITIALISED, despite it going via the
loadparm system.

This helps us to ensure that -W server -Ulocaluser is parsed the
same as -Userver\localuser.  This matters as otherwise we might
instead attempt to use kerberos to the realm from the smb.conf.

Andrew Bartlett
2011-10-18 13:13:30 +11:00
Andrew Bartlett
73d0ab6558 lib/param reduce the cost of loadparm_init_s3()
The parameter redirection covers most things now, so this should be safe.

Andrew Bartlett
2011-10-13 14:06:07 +02:00
Andrew Bartlett
43d84aa619 lib/param Print error when mkdir of lock path fails
This matches the s3 code for lock_path().

Andrew Bartlett
2011-10-13 14:06:07 +02:00
Andrew Bartlett
4a89361af4 lib/param Add 'use mmap' parameter to control tdb use of mmap 2011-10-13 14:06:07 +02:00
Jelmer Vernooij
b0d76efb6e s4/param: Expose lpcfg_smb_ports and lpcfg_socket_options, which are both required by winexe. 2011-10-11 23:53:59 +02:00
Jelmer Vernooij
aa472fc0f0 param: Expose lpcfg_smb_ports, required by winexe. 2011-10-11 23:51:37 +02:00
Stefan Metzmacher
e425a17cb4 lib/param: fix typo _SAMBA_BUILD => _SAMBA_BUILD_ causing segfaults
If lpcfg_dns_update_command() returns NULL 'samba' segfaults on startup.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Oct 11 17:25:19 CEST 2011 on sn-devel-104
2011-10-11 17:25:19 +02:00
Andrew Bartlett
c9bb497f3f lib/param Avoid dyn_ defines that are not provided by the autoconf build
The autoconf build will never use these parameters or load the
smb.conf with these defaults, so the defaults are not important.

Andrew Bartlett
2011-10-11 13:41:35 +11:00
Andrew Bartlett
1e5af9ecd0 lib/param Use strcasecmp_m rather than strcasecmp as this is banned in the s3 includes.h 2011-10-11 13:41:35 +11:00
Andrew Bartlett
8f2741ba1a lib/param Use talloc_strdup rather than strdup as strdup is banned in the s3 includes.h 2011-10-11 13:41:35 +11:00
Andrew Bartlett
1b81af0d56 lib/param Avoid the name string_set as this is already used in the s3 param code 2011-10-11 13:41:35 +11:00
Andrew Bartlett
15c97a8ab3 lib/param Avoid the use of the name service_ok() which is used in the s3 param code 2011-10-11 13:41:34 +11:00