sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code
11,284 Commits 60 Branches 1,145 Tags 452 MiB
e3468d8edc
Commit Graph

11284 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andrew Bartlett
b1c722e306 More signing updates - start checking that the server isn't being spoofed. 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
50a49e0bab Remove textfile from CVS - it's available in SGML now 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
5a6f79b4a0 Convert Anthony's RPC doc to SGML/XML 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
02aafdaa5a First attempt to convert John's GroupProfiles stuff to SGML/XML 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
b174fb761e First attempt to migrate the GroupProfiles stuff by John to SGML/XML 0001-01-01 00:00:00 +00:00
Andrew Bartlett
1a2738937e We now have client-side SMB signing support! 
This checking allows us to connect to Microsoft servers the use SMB signing,
within a few restrictions:

 - I've not get the NTLMSSP stuff going - it appears to work, but if you break
the sig - say by writing a zero in it - it still passes...
 - We don't currently verfiy the server's reply
 - It works against one of my test servers, but not the other...

However, it provides an excellent basis to work from.  Enable it with 'client
signing' in your smb.conf.

Doc to come (tomorrow) and this is not for 3.0, till we get it complete.

The CIFS Spec is misleading - the session key (for NTLMv1 at least) is the
standard session key, ie MD4(NT#).

Thanks to jra for the early work on this.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
f91d4c8fd3 Merge from HEAD: netbsd supports dynamic libs 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
dbb29495e7 NetBSD also supports dynamic libs 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9c3a1710ef Merge LDAP filter parinoia from HEAD, a few other pdb_ldap updates and some 
misc libads fixes.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
8485c51bc4 Merge from HEAD - convert username/password to unix before checking them in 
SWAT.
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
e9f56a157b Merge of signed/unsigned fixes from HEAD. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
8f495e8634 Bitmap offsets and counts are always positive. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9f3525967d Makefile.in change for ldap escaping fixes 0001-01-01 00:00:00 +00:00
Andrew Bartlett
013fa87473 One more signed/unsigned fix 0001-01-01 00:00:00 +00:00
Andrew Bartlett
69e94440cd Non-error connection numbers are always positive 0001-01-01 00:00:00 +00:00
Andrew Bartlett
98a4ebf55c Prompted by RedHat bugzilla bug #77999, convert the user's username and 
password from 'display' to 'unix' before we check them.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
21da8c3bb3 More ldap parinoia - if we ever get more than one result, bail. The order we 
get them in should be indeterminate, so just picking the first one would be
bad...

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
cvs2svn Import User
ed336acc6e This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
34b2e558a4 Always escape ldap filter strings. Escaping code was from pam_ldap, but I'm to 
blame for the realloc() stuff.

Plus a couple of minor updates to libads.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9494c1e153 More doco updates, in particular the fact that you must configure the smb.conf 
*before* you join, otherwise we don't have all the info that 'net join' needs.

Also move from smbpasswd -j to 'net join' in the examples.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
0944c69636 Clarify that 'use spnego = yes' is fine in all known situations. 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
0676b4e35f Make it clear that the magic value is (size_t)-1. 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
01d78b828b A couple more signed/unsigned issues. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
7fd0c9bd74 Minor doco updates - with a slightly bigger change to the 
'security=server/domain' text, to try and explain the difference better, and
why you should always use the latter.

Also update the BDC-HOWTO to have some relation to current reality.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9931f50b39 Clarifications for the ADS docs. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
dfe565e6ce Clear up the winbind doco on ADS support, and specify 'net join' not 'net rpc 
join' as people are using the 'wrong' one and wondering why it doesn't quite
work.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jeremy Allison
fdc14aa6f6 Added first part of attribute matrix tests. Not run and compiled in right now... 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
6624fa59d7 Ensure Luke Howard's (C) is added. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
4af9e80521 Ensure Luke Howard's (C) is added. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
07efebb984 Add 3 second timeout when terminating server and sending print notify 
messages. Stops build-up of large numbers of smbd's waiting to terminate
on large print throughput.
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
4ae130bfa8 Add 3 second timeout when terminating server and sending print notify 
messages. Stops build-up of large numbers of smbd's waiting to terminate
on large print throughput.
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
fa8647eb20 More scalable print tdb fixes. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
7ace900b33 More scalable print tdb fixes. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
371f4aca92 Sync up with 3.0 heimdal. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
e79dc0dade Re-added the Heimdal stuff tpot removed. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
d63849db6d Fix kerberos compile after the tpot massicre :-). 
Jeremy
 0001-01-01 00:00:00 +00:00
Jeremy Allison
1298ecd0b8 Revert tpot's HEAD merge which broke the Heimdal build. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
1fec0f50ed Stop tpot from trampling over my Heimdal fixes by moving some of them 
to HEAD :-).
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
90336900ad Revert tpot's breakage of the Heimdal fixes. 
Jeremy.
 0001-01-01 00:00:00 +00:00
Gerald Carter
29962f99f2 Straus VOS detection patches from Paul Green 0001-01-01 00:00:00 +00:00
Gerald Carter
726181537d Straus VOS detection patches from Paul Green 0001-01-01 00:00:00 +00:00
Tim Potter
6f89ee2c9d Sync of Heimdal kerberos stuff with HEAD. If this breaks I'm blaming 
the dog again.
 0001-01-01 00:00:00 +00:00
Tim Potter
71e2b60d8f Merge of controversial 'max log size' fix. 0001-01-01 00:00:00 +00:00
Tim Potter
abb112ba2a Merge of REQ_DEBUGLEVEL messaging and debug_count fixes from HEAD. 0001-01-01 00:00:00 +00:00
Tim Potter
08050a93d9 The REQ_DEBUGLEVEL message returns a string not a list of integers. 0001-01-01 00:00:00 +00:00
Tim Potter
6fee7196d6 Move debug level message handling into debug.c from messages.c 
Removed duplicate message_register() for REQ_DEBUGLEVEL message.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
d1e8991a76 Fix for interesting resource constraint condition. When all opens are 
level 2 and a request for open with no oplock is received then the
smbd should send *synchronous* break messages, not asynchronous,
otherwise it spins very rapidly, releasing the lock, sending the
'break to none' messages and then re-acquiring the lock before
any other process has a chance to get the lock and remove it's own
oplock (at least on linux).
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
33e3e863eb Fix for interesting resource constraint condition. When all opens are 
level 2 and a request for open with no oplock is received then the
smbd should send *synchronous* break messages, not asynchronous,
otherwise it spins very rapidly, releasing the lock, sending the
'break to none' messages and then re-acquiring the lock before
any other process has a chance to get the lock and remove it's own
oplock (at least on linux).
Jeremy
 0001-01-01 00:00:00 +00:00
John Terpstra
0104e80637 Added "passwd backend" to WIZARD section in SWAT. 0001-01-01 00:00:00 +00:00
Jeremy Allison
1e752b48a1 Merge tpot's changes to request the correct sizes for user dispinfo 
from HEAD. I had to do this for him as he was *so* tired, the poor
chap, plus he has this bad leg, plus the dog ate his homework etc. etc.
Jeremy.
 0001-01-01 00:00:00 +00:00