sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code
19,969 Commits 60 Branches 1,144 Tags 452 MiB
edd72d37de
Commit Graph

19969 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeremy Allison
edd72d37de r16987: Fix the logic errors in ref-counting Windows locks. 
Hopefully will fix the build farm. Still a few errors
in RAW-LOCK to look at though...
Jeremy.
 2007-10-10 11:19:16 -05:00
Jeremy Allison
53094435d8 r16973: Fix subtle logic error in lock ref counting found by 
cifsfs client code.
Jeremy.
 2007-10-10 11:19:16 -05:00
Jeremy Allison
596497ccc2 r16971: Ensure we use the correct separator for pathnames 
in POSIX mode (clitar needs fixing too). Add test
posix lock/unlock commands.
Jeremy.
 2007-10-10 11:19:16 -05:00
Jeremy Allison
883bb398e5 r16968: The function parse_processed_dfs_path() is dependent on the 
fact that check_path_syntax() will convert '\\' characters to '/'.
When POSIX pathnames have been selected this doesn't happen, so we
must look for the unaltered separator of '\\' instead of the modified '/'.
Stevef please check this with the CIFSFS MS-DFS code !
Jeremy
 2007-10-10 11:19:16 -05:00
Jeremy Allison
2d8d4bd77b r16962: Add a few utility fns into client. Allow POSIX capabilities 
to be selected.
Jeremy.
 2007-10-10 11:19:16 -05:00
Volker Lendecke
083ef11cc9 r16960: Some warnings from host "opi" 2007-10-10 11:19:15 -05:00
Gerald Carter
baf554c793 r16957: fix cut-n-paste error. The check for 'if (\!salt)' make no sense when fetching the DES salting principal 2007-10-10 11:19:15 -05:00
Volker Lendecke
bf701f5129 r16955: Fix an uninitialized var -- Jerry, please check. 2007-10-10 11:19:15 -05:00
Gerald Carter
ce7091fda1 r16954: Volker reminded me we already have code to do this check. 
Reuse can_create() to prevent renameing a group to
an existing user or group.
 2007-10-10 11:19:15 -05:00
Gerald Carter
7d619f127e r16953: Don't allow groups to be renamed to an existing user or other group 2007-10-10 11:19:15 -05:00
Gerald Carter
6261dd3c67 r16952: New derive DES salt code and Krb5 keytab generation 
Major points of interest:

* Figure the DES salt based on the domain functional level
  and UPN (if present and applicable)
* Only deal with the DES-CBC-MD5, DES-CBC-CRC, and RC4-HMAC
  keys
* Remove all the case permutations in the keytab entry
  generation (to be partially re-added only if necessary).
* Generate keytab entries based on the existing SPN values
  in AD

The resulting keytab looks like:

ktutil:  list -e
slot KVNO Principal
---- ---- ---------------------------------------------------------------------
   1    6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32)
   2    6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5)
   3    6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5)
   4    6           host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32)
   5    6           host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5)
   6    6           host/suse10@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5)
   7    6               suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32)
   8    6               suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5)
   9    6               suse10$@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5)

The list entries are the two basic SPN values (host/NetBIOSName & host/dNSHostName)
and the sAMAccountName value.  The UPN will be added as well if the machine has
one. This fixes 'kinit -k'.

Tested keytab using mod_auth_krb and MIT's telnet.  ads_verify_ticket()
continues to work with RC4-HMAC and DES keys.
 2007-10-10 11:19:15 -05:00
Jeremy Allison
508ba05a8e r16948: Sync the exmaples code from trunk. 
Jeremy.
 2007-10-10 11:19:14 -05:00
Jeremy Allison
441c289fd2 r16947: Fix warning with profile separator when profiles not 
being used.
Jeremy.
 2007-10-10 11:19:14 -05:00
Jeremy Allison
9dafb7f48c r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need 
to do the upper layer directories but this is what
everyone is waiting for....

Jeremy.
 2007-10-10 11:19:14 -05:00
Jeremy Allison
f131bf8f16 r16943: Add Jim's code. 
Jeremy.
 2007-10-10 11:19:13 -05:00
Günther Deschner
f2ebc0e3de r16941: Fix crash bug when the pam conversation receives an empty token. 
Thanks to Bjoern Jacke for the report and test-case.

Guenther
 2007-10-10 11:19:13 -05:00
Günther Deschner
df10448e2c r16940: libnscd sets errno, use that to display error message. 
Guenther
 2007-10-10 11:19:12 -05:00
Günther Deschner
4121ccfc3e r16939: Still clear the winbind_cache.tdb when offline logons are not enabled. 
Guenther
 2007-10-10 11:19:12 -05:00
Gerald Carter
5b4c4928ac r16927: back merge of a packaging fix for release numbers (from 3.0.23) 2007-10-10 11:19:12 -05:00
Volker Lendecke
84913caebd r16866: No idea why I did not see the warning, sorry.... 2007-10-10 11:19:12 -05:00
Volker Lendecke
9ec5ccfe85 r16865: This is a proposal to fix bug 3915. Before sending patches around, this is 
what svn is for.

The idea is that we fall back to a pure unix user with S-1-22 SIDs in the
token in case anything weird is going on with the 'force user'.

Volker
 2007-10-10 11:19:12 -05:00
Volker Lendecke
dc403cec88 r16864: Intermediate checkin -- swap the sid_check_is_in_unix_users and 
sid_check_is_in_our_domain cases.

Volker
 2007-10-10 11:19:12 -05:00
Günther Deschner
6257f9af93 r16862: Reverting accidential changes in ads_try_connect() from previous commit. 
Guenther
 2007-10-10 11:19:12 -05:00
Günther Deschner
863aeb621a r16861: Fixing crash bug when passing no domain/realm name to the CLDAP request. 
Guenther
 2007-10-10 11:19:11 -05:00
Gerald Carter
ef6e9ca527 r16845: Properly report the error during join when the set password fails 2007-10-10 11:19:11 -05:00
Günther Deschner
08958411ee r16836: When receiving a CLDAP reply make sure that we always store the correct 
netbios domain name in server affinity cache.

Guenther
 2007-10-10 11:19:11 -05:00
Günther Deschner
ebd3c547e5 r16823: Allow to call wbinfo --domain-info="" or --domain-info="." to get domain 
info for our own domain.

Guenther
 2007-10-10 11:19:11 -05:00
Simo Sorce
c139a2293b r16800: correct a probable cut&paste error 2007-10-10 11:19:11 -05:00
Günther Deschner
4e5ea585c3 r16799: Fix remote smbd crash bug by removing half-implemented info level 4 
dfs_Enum.

Guenther
 2007-10-10 11:19:11 -05:00
Günther Deschner
6bf350895a r16797: Add msdfs proxy junctions in the netdfs rpc enumeration. 
Guenther
 2007-10-10 11:19:11 -05:00
Günther Deschner
48ab7f4681 r16790: Fix memleak. 
Guenther
 2007-10-10 11:19:10 -05:00
Jeremy Allison
95e5ace6b4 r16789: Fix bug #3909, when using ea's getting a directory tries to 
read ea's from an msdfs link. Stop it from doing that.
Jerry please merge to 3.0.23.
Jeremy.
 2007-10-10 11:19:10 -05:00
Gerald Carter
154e4a2815 r16785: BUG 3908: Fix rpc bin authentication failure which broke user password changes 
Jeremy, please review.
 2007-10-10 11:19:10 -05:00
Volker Lendecke
03c665c307 r16766: A warning found by RHEL3. This might actually be 3.0.23 code, maybe there are 
vasprintf implementations that don't like a NULL format.

Volker
 2007-10-10 11:19:10 -05:00
Volker Lendecke
6fa928f96a r16755: Hunting warning has some benefits.... 
Solaris found this one that needs to go into 3.0.23, actually munlock the
password memory.

Volker
 2007-10-10 11:19:10 -05:00
Gerald Carter
eac00a45ef r16752: remove the 'socket options' setting from the shipped default smb.conf 2007-10-10 11:19:10 -05:00
Gerald Carter
b79e1c011d r16751: The precompiled header should really be in the $(buildir) and 
not the $(srcdir) to allow multiple concurrent compiles when the
source tree is shared via nfs.
 2007-10-10 11:19:09 -05:00
Gerald Carter
fa477969fb r16749: BUG 3905: don't fail in create_local_nt_token() when a 
checking for the builtin Administrators group membership.
security = server has no domain info in secrets.tdb
 2007-10-10 11:19:09 -05:00
Jeremy Allison
0606c95466 r16720: Fix bug #3874 (warning) reported by Jason Mader. 
Jeremy.
 2007-10-10 11:19:09 -05:00
Günther Deschner
6df2a39110 r16719: Automatically chase referrals, support LDAP fast bind exended operation 
and LDAP domain scope control.

Guenther
 2007-10-10 11:19:09 -05:00
Stefan Metzmacher
a558abb40d r16717: patch from Bjoern Jacke to fix compiler warnings on AIX 
metze
 2007-10-10 11:19:09 -05:00
Gerald Carter
9ae1d016d4 r16713: BUG 3904: fix broken smbwrapper compile 2007-10-10 11:19:09 -05:00
Gerald Carter
a25e75e78d r16701: Fix segv when adding a printer caused by not initializing the 
realm name in ads_init() in nt_printer_publish().
 2007-10-10 11:19:09 -05:00
Jeremy Allison
3b7fbe856c r16696: Fix the multiple-outstanding write and trans client 
signing bug.
Jeremy.
 2007-10-10 11:19:08 -05:00
Jeremy Allison
c4896b17fa r16687: Fix bugs #3901, #3902, #3903 reported by jason@ncac.gwu.edu. 
Jeremy
 2007-10-10 11:19:08 -05:00
Jeremy Allison
d48655d9c0 r16685: Fix bug #3901 reported by jason@ncac.gwu.edu. 
Jeremy.
 2007-10-10 11:19:07 -05:00
Jeremy Allison
8c7e40f2a4 r16683: Fix bug #3900 reported by jason@ncac.gwu.edu. 
Jeremy.
 2007-10-10 11:19:07 -05:00
Jeremy Allison
1cd9a0ef83 r16681: Fix bug #3899 reported by jason@ncac.gwu.edu. 
Jeremy.
 2007-10-10 11:19:07 -05:00
Jeremy Allison
5c5ea3152f r16678: Fix bug #3898 reported by jason@ncac.gwu.edu. 
Jeremy.
 2007-10-10 11:19:07 -05:00
Volker Lendecke
1a80266d77 r16676: .o generates other warnings, use the Solaris trick with .po.o also for AIX. 
Fix a configure.in output line

Volker
 2007-10-10 11:19:07 -05:00