Andrew Bartlett
e16a2a1fa9
s4:gensec Rework gensec_krb5 mutual authentication defaults
...
When emulating Samba3 (which we do to ensure we don't break
compatability), don't do mutual authentication by default, as it
breaks the session key with AES and isn't what Samba3 does anyway.
Andrew Bartlett
2009-07-16 09:23:36 +10:00
Andrew Bartlett
84dca625ca
s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIRED
...
We had previously assumed it was unconditional. Samba3 didn't mind
very much, but Samba4's samba3-like client did, and the behaviour
differed to Win2008 behaviour.
Andrew Bartlett
2009-07-16 09:23:35 +10:00
Andrew Bartlett
bc354fb1a6
s4:gensec Allow mutual auth to be turned off in 'fake_gssapi_krb5'
...
This allows the older 'like Samba3' GENSEC krb5 implementation to work
against Windows 2008. I'm using this to track down interop issues in
this area.
Andrew Bartlett
2009-07-16 09:23:35 +10:00
Andrew Bartlett
271b5af92e
s4:dsdb Handle dc/domain/forest functional levels properly
...
Rather than have the functional levels scattered in 4 different,
unconnected locations, the provision script now sets it, and the
rootdse module maintains it's copy only as a cached view onto the
original values.
We also use the functional level to determine if we should store AES
Kerberos keys.
Andrew Bartlett
2009-07-16 09:23:35 +10:00
Andrew Bartlett
ba58edd0bc
Add a way to set an opaque integer onto a samdb
...
This will allow us to set some more flags into ldb during the provision.
2009-07-16 09:23:35 +10:00
Timur I. Bakeyev
d6c44a704e
Add ad-schema/*.txt and utils to the installmisc.sh
...
Install other useful scripts from the setup/ directory, not only
provisioning ones.
Also install setup/ad-schema/*.txt files to the SETUPDIR. These are
necessary for 'provision' to work properly.
2009-07-16 09:23:35 +10:00
Jeremy Allison
48a0732147
Fix bug #6551 - win98 clients cannot connect after server upgrade to samba-3.4.0.
...
The values of vuid and tid were not being correctly updated in the struct smb_request
when passed to chain_reply inside sessionsetupX and tconX.
Jeremy.
2009-07-15 13:59:11 -07:00
Stefan Metzmacher
377a97579b
s3:smbd: try to fix a compiler warning on i386 : left shift count >= width of type
...
metze
2009-07-15 21:04:06 +02:00
Stefan Metzmacher
2fca950d68
s3:libsmb: we need to include "includes.h" as first header to let code build on all platforms
...
This should fix the Tru64 build.
metze
2009-07-15 20:59:35 +02:00
Stefan Metzmacher
8447600d98
s3:tldap: fix the build - a void function should not return a value
...
metze
2009-07-15 20:59:34 +02:00
Jeremy Allison
1f5aec877f
Make cli_unlock and cli_unlock64 async. Fix POSIX lock test.
...
Jeremy.
2009-07-15 11:49:33 -07:00
Stefan Metzmacher
b76ab511f7
s4:winbind: rename uint => uint32_t as uint isn't portable
...
metze
2009-07-15 20:47:07 +02:00
Stefan Metzmacher
722765213b
s4:libnet: rename uint => uint32_t because uint is not portable
...
metze
2009-07-15 20:47:00 +02:00
Stefan Metzmacher
dea2e4690a
s4:heimdal_build: try to fix the build on Solaris
...
We need the definition of 'struct flock'.
metze
2009-07-15 20:43:23 +02:00
Stefan Metzmacher
64ee4458cf
s4:ntvfs/ipc: replace unnesessary talloc_reference() by a simple talloc_strdup()
...
metze
2009-07-15 19:58:34 +02:00
Stefan Metzmacher
5240b10eaa
s3:ntvfs/posix: avoid unnesessary talloc_reference()
...
This caused the panics on the RAW-SETFILEINFO.RENAME test,
because we returned an empty strings.
The problem was:
ERROR: talloc_steal with references at ntvfs/posix/pvfs_setfileinfo.c:215
reference at ntvfs/posix/pvfs_resolve.c:799
metze
2009-07-15 19:24:35 +02:00
Björn Jacke
382d5c8f5b
s4:heimdal: teach heimdal we have (v)aѕprintf in libreplace
2009-07-15 18:40:57 +02:00
Björn Jacke
b08ca108ef
ѕ4:heimdal: teach heimdal that we have strnlen via libreplcae
2009-07-15 18:32:58 +02:00
Björn Jacke
5236b3699d
s3: make linking of rpcclient --as-needed safe
2009-07-15 17:38:40 +02:00
Peter Volkov
2df4550aae
s3: make linking of cifs.upcall --as-needed safe
...
See http://www.gentoo.org/proj/en/qa/asneeded.xml for details.
2009-07-15 17:38:34 +02:00
Michael Adam
7bd4699228
s3:dbwrap: fix embarrassing typo :-)
...
Michael
2009-07-15 17:10:47 +02:00
Michael Adam
5a525f7f28
s3:registry: db backend: add my C
...
Michael
2009-07-15 14:01:58 +02:00
Michael Adam
78576117eb
s3:registry: flush the provided subkey_ctr in regdb_fetch_keys_internal()
...
This way, we always return what has really been read from the db,
and not more. The callers assume exactly this, but one could hand
in an already pre-filled subkey container...
Michael
2009-07-15 14:01:58 +02:00
Michael Adam
92df5e4a02
s3:registry: add function regsubkey_ctr_reinit()
...
This reinitializes an already allocated regsubkey_ctr structure,
emptying out the subkey array and hash table.
Michael
2009-07-15 14:01:57 +02:00
Michael Adam
dc0bcfa188
s3:registry: turn regdb_fetch_keys_internal() from int to WERROR return type
...
This way, more error information is propagated to the callers.
Michael
2009-07-15 14:01:57 +02:00
Michael Adam
c52dd1d5b8
s3:registry: use transaction wrapper in create_sorted_subkeys()
...
Michael
2009-07-15 14:01:56 +02:00
Michael Adam
109ea29b2c
s3:registry: restructure logic of create_sorted_subkes() slightly
...
This makes it clearer to me, and it also makes it easier to
use the transaction retry wrapper in the next step.
Michael
2009-07-15 14:01:56 +02:00
Michael Adam
2d6dbcd0b1
s3:registry: use transaction wrapper in regdb_delete_subkey().
...
Michael
2009-07-15 14:01:55 +02:00
Michael Adam
a48d8353c7
s3:registry: add a comment header for the delete_subkey set of commands.
...
Michael
2009-07-15 14:01:55 +02:00
Michael Adam
5640598cbb
s3:registry: add a comment header for the create_subkey set of functions
...
Michael
2009-07-15 14:01:54 +02:00
Michael Adam
8c7b960493
s3:registry: use transaction wrapper in regdb_create_subkey()
...
Michael
2009-07-15 14:01:54 +02:00
Michael Adam
86d747e19f
s3:registry: use transaction wrapper in regdb_store_keys_internal().
...
Michael
2009-07-15 14:01:53 +02:00
Michael Adam
f93c9e0d41
s3:registry: don't leak to talloc_stack in regdb_store_keys_internal2()
...
and catch one potential talloc failure.
Michael
2009-07-15 14:01:53 +02:00
Michael Adam
3eec829e2f
s3:registry: unify exit logic and remove leaking to talloc_stack in regdb_store_keys_internal()
...
Michael
2009-07-15 14:01:53 +02:00
Michael Adam
14f593aa0f
s3:registry: change regdb_store_keys_internal2() to return WERROR
...
instead of bool for better error propagation.
Michael
2009-07-15 14:01:52 +02:00
Michael Adam
1c65c98f33
s3:registry: refactor adding of builtin reg values out
...
into regdb_ctr_add_value(). For readability.
Michael
2009-07-15 14:01:52 +02:00
Michael Adam
cf4f808b8b
s3:registry: use transaction wrapper in init_registry_data()
...
Michael
2009-07-15 14:01:51 +02:00
Michael Adam
e6340963cf
s3:registry: add regdb_store_values_internal() that takes a db_context argument
...
Michael
2009-07-15 14:01:51 +02:00
Michael Adam
302265aae1
s3:registry: add a regdb_fetch_values_internal() that takes a db_context argument
...
Michael
2009-07-15 14:01:50 +02:00
Michael Adam
8a5b164b20
s3:registry: use transaction wrapper in init_registry_key().
...
Michael
2009-07-15 14:01:50 +02:00
Michael Adam
95ebf534d2
s3:registry: add db_context argument to init_registry_key_internal()
...
Michael
2009-07-15 14:01:49 +02:00
Michael Adam
a00109e1e6
s3:registry: panic upon error at transaction_cancel in create_sorted_subkeys
...
Michael
2009-07-15 14:01:49 +02:00
Michael Adam
3189828087
s3:registry: fix a comment in create_sorted_subkeys()
...
Michael
2009-07-15 14:01:48 +02:00
Michael Adam
4c366a0946
s3:registry: don't loop transaction_commit in create_sorted_subkeys() upon error
...
This would try to commit a higher level transaction upon commit-error.
Michael
2009-07-15 14:01:48 +02:00
Michael Adam
6cb14409af
s3:registry: in regdb_delete_subkey(), don't use the transaction wrappers.
...
This way, the db handle gets used explicitly and the core of the
function can be abstracted.
Michael
2009-07-15 14:01:47 +02:00
Michael Adam
4eeacd6ef0
s3:registry: in regdb_delete_subkey(), panic if transaction_cancel fails
...
Michael
2009-07-15 14:01:47 +02:00
Michael Adam
355892c296
s3:registry: panic upon failed transaction_cancel in regdb_create_subkey()
...
Michael
2009-07-15 14:01:47 +02:00
Michael Adam
3409a44da2
s3:registry: don't use exported transaction wrappers in regdb_create_subkey()
...
So that the regdb handle is again explicit and the core of the
function can be abstracted.
Michael
2009-07-15 14:01:46 +02:00
Michael Adam
1dfaa371fa
s3:registry: create regdb_store_keys_internal() with db_context argument
...
and let exported regdb_store_keys() just call regdb_store_keys_internal()
with regdb as an argument. Internally, in reg_backend_db.c, always use the
_internal version.
Michael
2009-07-15 14:01:46 +02:00
Michael Adam
eb1958ca3d
s3:registry: rename regdb_store_keys_internal() to regdb_store_keys_internal2()
...
Michael
2009-07-15 14:01:45 +02:00