1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
Commit Graph

67989 Commits

Author SHA1 Message Date
Andrew Bartlett
a040466d0d s3-acl Merge source4-supported privileges into se_access_check
This will shortly be the common se_access_check function.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
7c6105ec27 s3-util_nttoken.c Also copy the rights_mask when copying a security_token
These are unused in source3/ code at the moment, but it would be
unfortunate if that were to change, and this function not be updated.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
170b345e0c s3-auth Use security_token_debug() from common code
This prints the security token including the privileges as strings
instead of just a bitmap.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
58cf83732a s3-auth use security_token_has_sid() from the common code
The wrapper call is left here to avoid changing semantics for
the NULL parameter case.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
deb7c02436 s3 Replace is_sid_in_token() with security_token_has_sid() from common code
The two routines are identical, so there is no need to keep both.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Tridgell
c41bb6e846 s4: show samba version in bin/samba -b
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 02:24:47 UTC 2010 on sn-devel-104
2010-10-14 02:24:47 +00:00
Matthias Dieter Wallnöfer
8c21a45e5c s4:samldb LDB module - cosmetic fixups
- Update the module description
- Fix indentation

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 20:55:18 UTC 2010 on sn-devel-104
2010-10-13 20:55:18 +00:00
Jelmer Vernooij
e13b934355 heimdal: Add soname for com_err.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 20:00:40 UTC 2010 on sn-devel-104
2010-10-13 20:00:40 +00:00
Jelmer Vernooij
f0124542bc heimdal: Add sonames.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 18:15:04 UTC 2010 on sn-devel-104
2010-10-13 18:15:04 +00:00
Jelmer Vernooij
01d14b4c57 samdb: Set soname. 2010-10-13 17:32:20 +00:00
Matthias Dieter Wallnöfer
bf657db3c4 s4:sam.py - tests for "userAccountControl" attribute
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 17:31:29 UTC 2010 on sn-devel-104
2010-10-13 17:31:29 +00:00
Matthias Dieter Wallnöfer
3411e71c76 s4:samldb LDB module - deny creation of temporary duplicate accounts 2010-10-13 18:46:13 +02:00
Matthias Dieter Wallnöfer
ed68189c5f s4:samldb LDB module - proof the account type also on LDB modify operations 2010-10-13 18:37:20 +02:00
Jelmer Vernooij
18ea6c5dce ldb: Only build LIBLDB_MAIN when building ldb itself.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 15:41:29 UTC 2010 on sn-devel-104
2010-10-13 15:41:29 +00:00
Matthias Dieter Wallnöfer
36c1ed215d s4:sam.py - add a test for the group type changing behaviour
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 14:17:31 UTC 2010 on sn-devel-104
2010-10-13 14:17:31 +00:00
Matthias Dieter Wallnöfer
826496ce55 s4:samldb LDB module - support the group type changing properly
This is exactly that what Windows allows. It was proven by a blackbox test.

And we also need to deny add operations of builtin groups.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
09ce56d957 s4:ldap.py - test the "isCriticalSystemObject" behaviour 2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
5cb99aa81a s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
It recognizes it now automatically.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
9bcb656bba s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations 2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
4638bd11b5 s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
They're only allowed to be created with the RELAX control specified.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
8806008024 s4:samldb LDB module - first implementation of the samldb primary group trigger
This was done according to MS-SAMR 3.1.1.8.2

But do use it only for add operations at the moment.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
635996e97c s4:samldb LDB module - use the new "objectclass_trigger" for add operations
Additionally clean up "samldb_fill_object" which is now much easier to
comprehend.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
2b6cbf2eb0 s4:samldb LDB module - first implementation of the samldb objectclass trigger
This was done according to MS-SAMR 3.1.1.8.1

I need to perform some RELAX checks since otherwise the provision wouldn't work
anymore.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
9bdea1b384 ldb:ldb_match.c - fix a counter type 2010-10-13 13:35:21 +00:00
Christian Ambach
beb5afea54 s3:gpfs: Add support for the gpfs_ftruncate call
ported from the v3-4-ctdb branch to master
This used to be commit 1f138cc9f4a

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Wed Oct 13 13:34:25 UTC 2010 on sn-devel-104
2010-10-13 13:34:25 +00:00
Christian Ambach
22018b8b88 s3:vfs:gpfs convert sharemodes/leases parameter
convert gpfs:sharemodes and gpfs:leases parameters from a global setting
to a per share setting
2010-10-13 12:53:16 +00:00
Christian Ambach
9e4a386d67 s3:vfs:syncops add option to disable module per share
add an option to disable the syncops module completely for a
share with
  syncops:disable = true
2010-10-13 12:53:16 +00:00
Christian Ambach
c1dad16ede s3:vfs:syncops make it possible to specify syncops:onclose per share
convert the onclose option of the vfs_syncops module from a
global option to a service-specific one

as preparation for further flags, use a struct to store in the VFS handle
instead of just the onclose flag
2010-10-13 12:53:16 +00:00
Jelmer Vernooij
5954e7173a wafsamba/developer: Forbid shared objects with unresolved symbols, if
the linker supports such a flag.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 12:52:22 UTC 2010 on sn-devel-104
2010-10-13 12:52:22 +00:00
Jelmer Vernooij
870de461cb wafsamba: Don't allow circular dependencies involving libraries by
default.
2010-10-13 14:10:42 +02:00
Jelmer Vernooij
ffb71f8ee3 dsdb/schema_data: Build as shared object. 2010-10-13 14:10:38 +02:00
Jelmer Vernooij
4313f0fbb5 dsdb/schema_load: Build as shared object. 2010-10-13 14:10:34 +02:00
Jelmer Vernooij
e07ca6f8e1 samdb: Build as library. 2010-10-13 14:10:27 +02:00
Andrew Tridgell
d5e599204c ldb: raise minor version number for new ldb_msg_match_error() function
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Oct 13 11:42:18 UTC 2010 on sn-devel-104
2010-10-13 11:42:17 +00:00
Andrew Tridgell
269143fa00 s4-ldb: take advantage of ldb_match_msg_error() in more places
this gives better error checking
2010-10-13 11:00:04 +00:00
Andrew Tridgell
549c044b9f s4-schema: don't name variables after standard libc functions 2010-10-13 11:00:04 +00:00
Andrew Tridgell
180304516d s4-ldb: use operator_fn syntax function in ldb_match code
this also fixes error handling in case of bad syntax, memory error
etc, which was previously conidered as a mismatch, but should return
an error

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
d267c8b478 s4-ldb: implement an operator_fn for the ldb-samba syntaxes
this allows us to properly handle the LDB_OP_PRESENT operator on
deleted linked attributes

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
3d75111fd6 s4-ldb: added an optional operator_fn in the schema syntax
this function takes the operator being invoked, which will allow
schema functions to provide more fine grained control over
comparisons.

The key bug this was introduced to fix is the incorrect handling of
the LDB_OP_PRESENT test for deleted linked attributes. The backends
are unaware of the deleted state of these links, so they cannot do a
LDB_OP_PRESENT test on their own.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
ca4864cce6 s4-torture: zero all of trans before the test starts 2010-10-13 11:00:04 +00:00
Andrew Tridgell
261628d1e4 s4-torture: fixed uninitialised variable error
ret is uninitialised if the directory is empty
2010-10-13 11:00:04 +00:00
Andrew Tridgell
b5ffdb6f9c s4: don't rebuild all of heimdal when dynconfig options change
only 2 files in heimdal depend on dynconfig variables
2010-10-13 11:00:04 +00:00
Andrew Tridgell
d0293428fe autobuild: do make install after make test
this ensures that commits that break uninstalled testing get caught by
autobuild in future

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
72de3e698b s4-dynconfig: use the build modules when running from build directory
we need to use the newly built modules when running from the build
directory to ensure we don't run tests against a stale install

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
d95160ca2f ldb: when running from build directory, use the build modules
we need to use the build modules, not the installed modules, so tests
run from the source directory are valid

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-10-13 11:00:03 +00:00
Matthieu Patou
f81c840380 s4 rpc_server: fix a build error on freebsd
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Wed Oct 13 10:48:04 UTC 2010 on sn-devel-104
2010-10-13 10:48:04 +00:00
Jelmer Vernooij
1229935aa9 torture/becomedc: Add test for global schema, use samdb_connect().
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Oct 12 18:35:33 UTC 2010 on sn-devel-104
2010-10-12 18:35:33 +00:00
Jelmer Vernooij
24ec465790 wafsamba: Warn about circular dependencies between libraries. 2010-10-12 19:23:59 +02:00
Michael Adam
cda2db5edf s3:registry: fix some trailing spaces in reg_backend_db
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue Oct 12 14:15:42 UTC 2010 on sn-devel-104
2010-10-12 14:15:42 +00:00
Kai Blin
5ad0ed2181 libwbclient: Remove half-finished async implementation
The old approach on doing async libwbclient was never really finished.
Go ahead and remove this implementation.

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Oct 12 07:05:31 UTC 2010 on sn-devel-104
2010-10-12 07:05:31 +00:00