1
0
mirror of https://github.com/samba-team/samba.git synced 2025-12-12 12:23:50 +03:00
Commit Graph

1668 Commits

Author SHA1 Message Date
Jeremy Allison
cdc3aa9d07 r15341: Ok I give up, I've been beaten by bug reports. People
just don't get why "guest ok" is not allowed in usershares.
Added "usershare allow guests" bool parameter that allows
this, reved usershare file version to VERSION#2 which
allows this. Updated user tools.
This should now be (finally) finished and I'll add
the new parameter docs and a HOWTO.
Jeremy.
2007-10-10 11:16:36 -05:00
Jeremy Allison
780b71d300 r15336: Unknown escape sequence: '\305' - should have been '\n'.
(How did that get in there ?).
Jeremy
2007-10-10 11:16:36 -05:00
Gerald Carter
3522b53aec r15311: look at the NT password (not lanman one) when determining if smbpasswd -e should probably for a password 2007-10-10 11:16:35 -05:00
Günther Deschner
5557ada694 r15305: Let winbind search by sid directly (or in windows terms: "bind to a
sid"); works in all AD versions I tested. Also add "net ads sid" search
tool.

Guenther
2007-10-10 11:16:33 -05:00
Günther Deschner
e55e1e1e96 r15198: Mention the auditing tool in "net rpc help".
Guenther
2007-10-10 11:16:28 -05:00
Günther Deschner
ba81b508ca r15194: We need to be able to join as PDC as well. Thanks to Andrew Bartlett.
Guenther
2007-10-10 11:16:28 -05:00
Volker Lendecke
bb8c69162f r15173: Fix a non-critical memleak 2007-10-10 11:16:27 -05:00
Alexander Bokovoy
f068862e56 r15152: Fix a case when target is offline. Jerry, this needs to be in 3.0.23pre1 2007-10-10 11:16:26 -05:00
Volker Lendecke
0ef5e4372c r15137: Refuse to join if our netbios name is longer than 15 chars. I think this is
sufficient to fix bug #3659.

Volker
2007-10-10 11:16:26 -05:00
Volker Lendecke
a6e88785e7 r15136: Fix join consistency check 2007-10-10 11:16:25 -05:00
Günther Deschner
22b6875897 r15123: Don't even try to join with an inproper configuration.
Guenther
2007-10-10 11:16:25 -05:00
Gerald Carter
a95d11345e r15053: fix portabilities issues between 32-bit winbind clients and a 64-bit winbindd server 2007-10-10 11:16:00 -05:00
Günther Deschner
0fed66926f r15041: Adding rpc client calls to manipulate auditing policies on remote CIFS
servers. Also add a new "net rpc audit" tool. The lsa query infolevels
were taken from samb4 IDL, the lsa policy flags and categories are
partly documented on msdn. I need to cleanup the double
lsa_query_info_policy{2}{_new} calls next.

Guenther
2007-10-10 11:15:59 -05:00
Jeremy Allison
08e52ead03 r15018: Merge Volker's ipc/trans2/nttrans changes over
into 3.0. Also merge the new POSIX lock code - this
is not enabled unless -DDEVELOPER is defined.
This doesn't yet map onto underlying system POSIX
locks. Updates vfs to allow lock queries.
Jeremy.
2007-10-10 11:15:57 -05:00
Volker Lendecke
ba41c62b8b r15011: Fix bug # 2413. net rpc info can't reliably work anonymously anymore.
Volker
2007-10-10 11:15:56 -05:00
James Peach
ffe1a2e23f r14900: Separate words in error message. 2007-10-10 11:15:53 -05:00
James Peach
5f4f4cbe6f r14899: Add missing semi-colon. 2007-10-10 11:15:53 -05:00
James Peach
56bc02d644 r14898: This change is an attempt to improve the quality of the information that
is produced when a process exits abnormally.

First, we coalesce the core dumping code so that we greatly improve our
odds of being able to produce a core file, even in the case of a memory
fault. I've removed duplicates of dump_core() and split it in two to
reduce the amount of work needed to actually do the dump.

Second, we refactor the exit_server code path to always log an explanation
and a stack trace. My goal is to always produce enough log information
for us to be able to explain any server exit, though there is a risk
that this could produce too much log information on a flaky network.

Finally, smbcontrol has gained a smbd fault injection operation to test
the changes above. This is only enabled for developer builds.
2007-10-10 11:15:53 -05:00
Jeremy Allison
75be5c17bc r14831: Fix possible null deref. Coverity #279.
Jeremy.
2007-10-10 11:15:49 -05:00
Günther Deschner
d17712f976 r14757: Make sure we only send out a CLDAP request to an connected AD server.
Guenther
2007-10-10 11:15:46 -05:00
Jeremy Allison
9117713c5e r14743: Fix coverity bug #227. Possible deref of null pointer
in error code path.
Jeremy.
2007-10-10 11:15:45 -05:00
Gerald Carter
08d201806f r14699: allow 'net sam addmem' to accept a SID for the member 2007-10-10 11:15:44 -05:00
Jim McDonough
b4ec93f5a2 r14683: Get rid of hardcoded output file. With no arg, print to stdout,
otherwise append to output file specified.
2007-10-10 11:15:43 -05:00
Jim McDonough
0d4bd93a5c r14681: Get rid of hardcoded /tmp/add.ldif and /tmp/mod.ldif files. Is there a
different directory the temp files should be in, or is /tmp ok?

Still have to get rid of the output file hardcoding, but that is to
come, because I need to cleanup stdout.
2007-10-10 11:15:43 -05:00
Günther Deschner
afc519530f r14585: Tighten argument list of kerberos_kinit_password again,
kerberos_kinit_password_ext provides access to more options.

Guenther
2007-10-10 11:15:38 -05:00
Gerald Carter
3137fe5068 r14580: add 'net sam createbuiltingroup' to map BUILTIN local groups to a gid 2007-10-10 11:15:38 -05:00
Gerald Carter
df53d64910 r14577: BUG Fixes:
* Add back in the import/export support to pdbedit
* Fix segv in pam_smbpass
* Cleanup some error paths in pdb_tdb and pdb_interface
2007-10-10 11:15:37 -05:00
Jeremy Allison
7fc61f5a63 r14416: Remove deadcode. Coverity #198.
Jeremy.
2007-10-10 11:15:29 -05:00
Gerald Carter
612979476a r14403: * modifies create_local_nt_token() to create a BUILTIN\Administrators
group IFF sid_to_gid(S-1-5-32-544) fails and 'winbind nested groups = yes'

* Add a SID domain to the group mapping enumeration passdb call
  to fix the checks for local and builtin groups.  The SID can be
  NULL if you want the old semantics for internal maintenance.
  I only updated the tdb group mapping code.

* remove any group mapping from the tdb that have a
  gid of -1 for better consistency with pdb_ldap.c.
  The fixes the problem with calling add_group_map() in
  the tdb code for unmapped groups which might have had
  a record present.

* Ensure that we distinguish between groups in the
  BUILTIN and local machine domains via getgrnam()
  Other wise BUILTIN\Administrators & SERVER\Administrators
  would resolve to the same gid.

* Doesn't strip the global_sam_name() from groups in the
  local machine's domain (this is required to work with
  'winbind default domain' code)

Still todo.

* Fix fallback Administrators membership for root and domain Admins
  if nested groups = no or winbindd is not running

* issues with "su - user -c 'groups'" command

* There are a few outstanding issues with BUILTIN\Users that
  Windows apparently tends to assume.  I worked around this
  presently with a manual group mapping but I do not think
  this is a good solution.  So I'll probably add some similar
  as I did for Administrators.
2007-10-10 11:15:28 -05:00
Jim McDonough
1804a8a01e r14278: Remainder of fix for Coverity #79,80,81: only allow GROUP or OWNER to be
specified once in an ACL, so it can be allocated a second time,
overwriting the first
2007-10-10 11:15:22 -05:00
Jim McDonough
1899d8ea28 r14272: Fix Coverity # 81: free alloc'ed storage before returning 2007-10-10 11:15:22 -05:00
Volker Lendecke
32364d8f01 r14214: Fix Coverity Bug # 57 2007-10-10 11:15:16 -05:00
Jim McDonough
655fb66b28 r14156: Fix coverity #114: free storage alloc'ed by sstring_sub() 2007-10-10 11:15:14 -05:00
Jim McDonough
a197b8c5cb r14155: Fix coverity #115: free storage alloc'ed by sstring_sub() 2007-10-10 11:15:14 -05:00
Jim McDonough
dbc0ff5544 r14153: Fix coverity #116: free storage alloc'ed by sstring_sub() 2007-10-10 11:15:14 -05:00
Jim McDonough
cf36f5949f r14152: Fix coverity #117: free storage alloc'ed by sstring_sub 2007-10-10 11:15:14 -05:00
Jim McDonough
6ff849f35a r14150: Fix coverity #118: not freeing alloc'ed storage returned from
sstring_sub().
2007-10-10 11:15:14 -05:00
Jim McDonough
2d7ba11ffb r14147: Fix coverity #119. alloc'ed memory returned not saved, so not freed.
Need to go back and correct the assumption that an "ldap xxx suffix"
parm must have an OU.
2007-10-10 11:15:13 -05:00
Günther Deschner
ade86cc787 r14146: Just some typos.
Guenther
2007-10-10 11:15:13 -05:00
Jim McDonough
f75dad0325 r14135: Fix for Coverity #123: resource leak. Also rework much of the code to
make it cleaner.  There's still more to do on this...
2007-10-10 11:15:13 -05:00
Volker Lendecke
1df58c7a00 r14101: Fix a segfault in trustdom establish, cli is NULL here. 2007-10-10 11:11:12 -05:00
Volker Lendecke
db00570535 r14099: Fix Coverity # 113 2007-10-10 11:11:12 -05:00
Volker Lendecke
121a350b92 r14098: Fix Coverity # 112 2007-10-10 11:11:11 -05:00
Jeremy Allison
88dd4ab481 r14087: Protect against domain being NULL. Finish Coverity #152.
Jeremy.
2007-10-10 11:11:11 -05:00
Jim McDonough
d8e69c18e0 r14085: Fix coverity bg #152, uninit'ed var. 2007-10-10 11:11:11 -05:00
Günther Deschner
0167b6cca8 r14062: Forgot those in the uint16/32 acb_info switch.
Guenther
2007-10-10 11:11:09 -05:00
Jim McDonough
2690f015be r14053: Implement Simo's suggestion: don't use /dev/null for a 'bad' path for
users/workstations
2007-10-10 11:11:08 -05:00
Volker Lendecke
c1ea48949d r14036: Ok, the last one generated a const warning. Also fix Coverity # 119.
net rpc vampire is ugly....

Volker
2007-10-10 11:11:07 -05:00
Volker Lendecke
9fe21fd032 r14035: Fix Coverity bug # 124 2007-10-10 11:11:07 -05:00
Volker Lendecke
e6e29937e8 r14034: Fix Coverity id # 125.
Jeremy, you might want to take a look here.

Volker
2007-10-10 11:11:07 -05:00