1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
Commit Graph

21765 Commits

Author SHA1 Message Date
Volker Lendecke
eca13022ef r21960: Fix bugs 4463,4464,4465,4466. Thanks Jason :-)
(This used to be commit a2e27c4431)
2007-10-10 12:18:52 -05:00
Volker Lendecke
643157ff5a r21959: Merge a comment fix from Michael Adam -- more to come :-)
(This used to be commit 06a4d2ce5d)
2007-10-10 12:18:52 -05:00
Volker Lendecke
7216604b5e r21958: Fix Coverity ID 343 (dead code)
(This used to be commit 6d093043ed)
2007-10-10 12:18:52 -05:00
Herb Lewis
dfc4a8b2b2 r21957: minor formatting fix
(This used to be commit 99b9570ebe)
2007-10-10 12:18:52 -05:00
Jeremy Allison
28220ed710 r21956: Fix bug reported by don.mccall@hp.com for platforms
without utimes() call (only utime()).
Jeremy.
(This used to be commit 63b061a2ea)
2007-10-10 12:18:52 -05:00
Jeremy Allison
772b70b478 r21954: Someone misused a '!' instead of a '~' for a binary NOT
command. Jerry, Simo, please check.
Jeremy.
(This used to be commit 8ff76a9cb8)
2007-10-10 12:18:52 -05:00
Jeremy Allison
b93126ea12 r21953: One format fix, clarify a condition that the IBM
checker was worried about.
Jeremy.
(This used to be commit 70eec7b8ae)
2007-10-10 12:18:52 -05:00
Jeremy Allison
eb46589432 r21952: Fix critical (!) error found by IBM checker.
Missing break statements meant that no info
levels would ever be returned correctly from
POSIX open/mkdir.
Jeremy.
(This used to be commit ae5761ccc6)
2007-10-10 12:18:51 -05:00
James Peach
cc87cb7770 r21950: After discussion with the Apple and Linux client maintainers,
changing the FindFirst response for the UNIX_INFO2 level to include
a length field before the name. The name is not required to be null
terminated. The length field does not count any null.

Also add call to chflags(2) in the default VFS module so that this
will work be default on BSD-derived platform. Add UNIX-INFO2 test
to the build farm to get some non-BSD coverage.

Jeremy and Jerry, please review for inclusion in 3.0.25.
(This used to be commit e7b21b1ef3)
2007-10-10 12:18:51 -05:00
Jeremy Allison
16a029f7f3 r21948: Fix valgrind error in build farm samba3 smbtorture. We were
using an uninitialized buffer for read/write tests.
Jeremy.
(This used to be commit e27d094620)
2007-10-10 12:18:51 -05:00
Jeremy Allison
b3646bd809 r21947: Fix the equivalent of memcpy(x, x, 16). Found
by valgrind on the build farm.
Jeremy.
(This used to be commit 6eed92dfd4)
2007-10-10 12:18:51 -05:00
Stefan Metzmacher
6685e53385 r21944: move acl header checks to the correct place only
jeremy: please merge this to 3.0.25:-)

metze
(This used to be commit 874164e365)
2007-10-10 12:18:51 -05:00
Jeremy Allison
bf26a7632e r21942: Hoist by our own petard :-). Older smbclient binaries
were not able to connect to the rewritten dfs code as
they set the dfs flag bit but then send local paths.

Now that our dfs code is a *lot* more robust in
detecting this sort of braindamage we can just
call into it directly on getting a DFS flag
and let the parser sort it out without having
to check it's actually connecting to a dfs
enabled share (I'm proud of this code :-).

Jeremy.
(This used to be commit 8c4d929c76)
2007-10-10 12:18:51 -05:00
Volker Lendecke
8a2b73a58a r21941: Attempt to fix bug 4460
(This used to be commit d1b8f00c12)
2007-10-10 12:18:51 -05:00
Gerald Carter
5b105eaf7c r21940: Sorry Volker, I have to revert your revert in r21935.
We can talk about this later if you still feel that strongly
but I need to fix the build for now.
(This used to be commit c7df0cad82)
2007-10-10 12:18:50 -05:00
Jeremy Allison
d506caf2b5 r21939: Fix missing initialization that
broke the build farm. Thanks to
Metze for the heads up.
Jeremy.
(This used to be commit bb3623be3f)
2007-10-10 12:18:50 -05:00
Volker Lendecke
719f4657e8 r21935: Revert obviously not sufficiently tested code -- sorry for the pain. I am afraid I was basically off the net for the day
(This used to be commit 08c29abc03)
2007-10-10 12:18:50 -05:00
Stefan Metzmacher
035bb5cc6f r21934: fix the build sorry
metze
(This used to be commit 184c461977)
2007-10-10 12:18:50 -05:00
Gerald Carter
e68ea1283d r21933: Change the write_sock() call in pam_winbind_request()
to not request a privileged pipe operation for everything
as this cannot be done from a process running under the
context of a user (e.g. screensaver).

Thanks to Danilo Almeida <dalmeida@centeris.com> for the help
in pointing out the change to write_sock().
(This used to be commit 80790f935a)
2007-10-10 12:18:50 -05:00
Stefan Metzmacher
00320f7a58 r21932: fix compiler warning.
maybe also for 3.0.25

metze
(This used to be commit 844dac912c)
2007-10-10 12:18:50 -05:00
Stefan Metzmacher
c542e154c2 r21931: include acl/libacl.h is present
I'm not sure if this should go into 3.0.25... it fixes a compiler warning about
a missing acl_get_perm() prototype

metze
(This used to be commit 4b67f94c6a)
2007-10-10 12:18:49 -05:00
Jeremy Allison
820184bdcc r21927: Removed unused variable.
Jeremy.
(This used to be commit 2d951c91a5)
2007-10-10 12:18:49 -05:00
Jeremy Allison
f93d75c932 r21926: Fix missing enum specifier pointed out by Don McCall @ HP.
Thanks Don !
Jeremy.
(This used to be commit 662344d1ec)
2007-10-10 12:18:49 -05:00
Jeremy Allison
23149b3bb8 r21925: Start to code up the gss acquire creds calls.
Jeremy.
(This used to be commit 4a7fbc8852)
2007-10-10 12:18:49 -05:00
Jeremy Allison
5a025d845a r21923: Add in the gss decrypt.
Jeremy.
(This used to be commit 00f58951b4)
2007-10-10 12:18:49 -05:00
Jeremy Allison
8c395be5e5 r21922: Fixed the build by rather horrid means. I really need
to restructure libsmb/smb_signing.c so it isn't in
the base libs path but lives in libsmb instead (like
smb_seal.c does).
Jeremy.
(This used to be commit 1b828f051d)
2007-10-10 12:18:49 -05:00
Simo Sorce
a38b34aa3b r21919: now that the local passdb abd BUILTIN have been blacklisted and they always
point to the passdb module, remove this comment and move the explanation in
the dimap_ad man page.

Simo.
(This used to be commit 58d2ec00d2)
2007-10-10 12:18:49 -05:00
Gerald Carter
b44d53e307 r21918: Reverting this change as it is now causing aborts() in
find_builtin_domain().    This all needs more testing
before anyone starts changing these lookup routines again.
(This used to be commit add225e1c8)
2007-10-10 12:18:48 -05:00
Jeremy Allison
42238c78bb r21917: Start to do the gss versions of sign+seal.
Jeremy.
(This used to be commit a226645353)
2007-10-10 12:18:48 -05:00
Jeremy Allison
56c777882f r21916: Fix couple of "return" calls on void functions.
Ensure we ignore reqests to free keepalive buffers
as we only copied these.
Jeremy.
(This used to be commit a184bdbe3c)
2007-10-10 12:18:48 -05:00
Gerald Carter
3f85405be0 r21913: fix one bug in build 717: correctly check the return from sid_peek_check_rid() when trying to find a matching domain
(This used to be commit c63bc30037)
2007-10-10 12:18:48 -05:00
Jeremy Allison
d8bb69515b r21912: There's no point checksumming the packet length
this already has to be right. This makes the
signed+sealed area the same as it will be with
gss calls. Now to go implement them.
Jeremy.
(This used to be commit 80810af7d1)
2007-10-10 12:18:48 -05:00
Gerald Carter
e17a35e3ea r21908: update with the 3.0.25 packaging
(This used to be commit 3c2c0bb293)
2007-10-10 12:18:48 -05:00
Gerald Carter
f8c2960d45 r21905: Rename
idmap expire time 	-> idmap cache time
  idmap negative time	-> idmap negative cache time
(This used to be commit aac2d0af5e)
2007-10-10 12:18:48 -05:00
Volker Lendecke
4a965110e5 r21904: Fix HP build -- thanks, Don
(This used to be commit 57efba97b6)
2007-10-10 12:18:47 -05:00
Jeremy Allison
6aff12a9f6 r21903: Get the length calculations right (I always forget
the 4 byte length isn't included in the length :-).
We now have working NTLMSSP transport encryption
with sign+seal. W00t!
Jeremy.
(This used to be commit d34584cb5c)
2007-10-10 12:18:47 -05:00
Jeremy Allison
9874b3bfa7 r21902: Don't free the thing you're trying to set in the cli state.
Jeremy.
(This used to be commit 1639366561)
2007-10-10 12:18:47 -05:00
Jeremy Allison
7ae9e6aff5 r21901: Don't use fstrcat when you mean fstrcpy. Doh !
Jeremy.
(This used to be commit c7153411f1)
2007-10-10 12:18:47 -05:00
Jeremy Allison
ea4dada48f r21900: Token exchange now seems to work, now why does the
client encrypt fail ?
Jeremy.
(This used to be commit 6bd7c05290)
2007-10-10 12:18:47 -05:00
Jeremy Allison
7e55a6e6c7 r21899: At least we're getting to stage 2 of the blob
exchange. Still not working but closer.
Jeremy.
(This used to be commit 2fde5c703d)
2007-10-10 12:18:47 -05:00
Jeremy Allison
a828b56884 r21898: Added test command, fixed first valgrind bugs.
Now to investigate why it doesn't work :-).
Jeremy.
(This used to be commit 73f7c6cef8)
2007-10-10 12:18:47 -05:00
Jeremy Allison
071db6fdbf r21897: Add in a basic raw NTLM encrypt request. Now
for testing.
Jeremy.
(This used to be commit 783a7b3085)
2007-10-10 12:18:46 -05:00
Jeremy Allison
6b0dcfa62d r21894: Some refactoring of server side encryption context. Support
"raw" NTLM auth (no spnego).
Jeremy.
(This used to be commit 6b5ff7bd59)
2007-10-10 12:18:46 -05:00
Rafal Szczesniak
f1ffc96a24 r21893: Update comments so they actually reflect reality...
rafal
(This used to be commit 8f313061a4)
2007-10-10 12:18:46 -05:00
Volker Lendecke
93b2485c9b r21892: Mini-Patch from Michael
(This used to be commit 6cae3cf281)
2007-10-10 12:18:46 -05:00
Jeremy Allison
492ad71855 r21891: Finish server-side NTLM-SPNEGO negotiation support.
Now for the client part, and testing.
Jeremy.
(This used to be commit 487706701f)
2007-10-10 12:18:46 -05:00
Gerald Carter
2af42eaaa3 r21888: Add the osname and osver options to 'net ads join' as discussed
on the samba-technical ml.

I'll add a 'net ads set attribute=value' utility later
rather than the original 'net ads setmachineupn' patch that
was also posted to the tech ml.
(This used to be commit 5035778ae4)
2007-10-10 12:18:45 -05:00
Günther Deschner
ed360fe5e5 r21887: Fix annoying bug where in a pam_close_session (or a pam_setcred with the
PAM_DELETE_CREDS flag set) any user could delete krb5 credential caches.
Make sure that only root can do this.

Jerry, Jeremy, please check.

Guenther
(This used to be commit 947a59a849)
2007-10-10 12:18:44 -05:00
Alexander Bokovoy
679a313517 r21885: Chown logic should be activated only if nfs4:chown=yes
(This used to be commit b10410634f)
2007-10-10 12:18:44 -05:00
Gerald Carter
52d5e2a935 r21884: * Blacklist BUILTIN and MACHINE domains from the
idmap domains as these should only be handled by the
  winbindd_passdb.c backend

* Allow the alloc init to fail for backwards compatible
  configurations like

     idmap backend = ad
     idmap uid = 1000-100000
	....

* Remove the deprecated flags from idmap backend, et. al.
  These are mutually exclusive with the new configuration
  options (idmap domains).  Logging annoying messages
  about deprecated parameters is confusing.  So we'll try
  this apprpach for now.
(This used to be commit 5e30807b4e)
2007-10-10 12:18:44 -05:00