1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00
Commit Graph

704 Commits

Author SHA1 Message Date
Jim McDonough
ba72b0242e r17179: Merge the vl-posixacls tmp branch into mainline. It
modularizes our interface into the special posix API used on
the system. Without this patch the specific API flavor is
determined at compile time, something which severely limits
usability on systems with more than one file system. Our
first targets are AIX with its JFS and JFS2 APIs, at a later
stage also GPFS. But it's certainly not limited to IBM
stuff, this abstraction is also necessary for anything that
copes with NFSv4 ACLs. For this we will check in handling
very soon.

Major contributions can be found in the copyright notices as
well as the checkin log of the vl-posixacls branch. The
final merge to 3_0 post-3.0.23 was done by Peter Somogyi
<psomogyi@gamax.hu>
(This used to be commit ca0c73f281)
2007-10-10 11:38:17 -05:00
Gerald Carter
5ac15bc63a r17147: Install fixes for libraries
(This used to be commit 72bac13f21)
2007-10-10 11:38:16 -05:00
Volker Lendecke
0e2f7c0ea4 r17138: In preparation for the cluster merge, add an empty configure option :-)
Volker
(This used to be commit 906720649b)
2007-10-10 11:38:14 -05:00
Gerald Carter
0ea9508d53 r17021: remove unsupported smbwrapper code
(This used to be commit 07c67fbfc0)
2007-10-10 11:19:20 -05:00
Jeremy Allison
fbdcf2663b r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need
to do the upper layer directories but this is what
everyone is waiting for....

Jeremy.
(This used to be commit 9dafb7f48c)
2007-10-10 11:19:14 -05:00
Volker Lendecke
48229b35d7 r16676: .o generates other warnings, use the Solaris trick with .po.o also for AIX.
Fix a configure.in output line

Volker
(This used to be commit 1a80266d77)
2007-10-10 11:19:07 -05:00
James Peach
ae412ebe71 r16483: Turn off some useless MIPSPro warnings be default.
(This used to be commit a22bf28bca)
2007-10-10 11:18:56 -05:00
James Peach
d2864af2e7 r16482: Fix bugzilla 3801 by forcing MIPSPro warning 1035 to be an error.
(This used to be commit 2131ddd7a1)
2007-10-10 11:18:56 -05:00
Gerald Carter
58edac3c27 r16478: small cleanup to make pam_winbind.so build and iniparser
include directory like other parts of the build files.
(This used to be commit 0fca41efde)
2007-10-10 11:18:56 -05:00
Volker Lendecke
0f14e3eb8d r16340: Commit Bjoern's fix for the AIX PIC suffix. 'make test' still does the first
tests, and vfstest is still able to load modules. Looks like this is ok :-)

Volker
(This used to be commit c08bfdf87a)
2007-10-10 11:17:36 -05:00
Jeremy Allison
0eb9bd176e r16287: Use intptr_t to return an integer of an unknown type cast
to void *.
Jeremy.
(This used to be commit e24361ecdd)
2007-10-10 11:17:31 -05:00
Günther Deschner
e030a9e9dc r16268: Add TCP fallback for our implementation of the CHANGEPW kpasswd calls.
This patch is mainly based on the work of Todd Stecher
<tstecher@isilon.com> and has been reviewed by Jeremy.

I sucessfully tested and valgrinded it with MIT 1.4.3, 1.3.5, Heimdal
0.7.2 and 0.6.1rc3.

Guenther
(This used to be commit 535d03cbe8)
2007-10-10 11:17:29 -05:00
James Peach
8882d08b6b r16111: Patch from Björn JACKE <samba@j3e.de>.
This fixes a problem where the clock definition for clock_gettime() is
present at compile time, but is not available on the running system. In
this case, we fall back to less-preferred clocks until we find one that
we can use.
(This used to be commit fc6ed6a1aa)
2007-10-10 11:17:20 -05:00
James Peach
777c22b300 r16057: Coalesce the DMAPI configure tests into a single macro. Add
a more specific probe to try and eliminate old, incompatible
DMAPI implementations provided by IRIX 6.4 and AIX 4.3.
(This used to be commit aafd4db457)
2007-10-10 11:17:18 -05:00
James Peach
5f8eb11651 r15928: When we search for clock_gettime, we might find it in librt, but librt
might pull in libpthread. This is quite bad, firstly because it can
cause oplock signals on Linux to go wonky, and secondly because merely
linking with pthreads can cause performance degradations due to implicit
locking requirements.

The solution is to only search for clock_gettime if --with-profiling-data
was specified. If we do end up searching for it, then we test whether
linking with librt pulled in libpthread, and we only allow the definition
for clock_gettime to succeed if libpthread was NOT linked in.

Problem reported by Thomas Bork and diagnosed by Volker Lendecke.
(This used to be commit 5712644fcc)
2007-10-10 11:17:13 -05:00
James Peach
dc64af1d2e r15654: Update our internal copy of popt to that distributed with the RPM 4.2
source code.
(This used to be commit 9559886a92)
2007-10-10 11:17:05 -05:00
Günther Deschner
ae0939ee66 r15634: Prevent passwords of winbindd's list of credential caches from beeing
swapped to disc using mlock(). (patch was reviewed by Jeremy).

Guenther
(This used to be commit 206cdbb8e9)
2007-10-10 11:17:04 -05:00
Gerald Carter
8c76903efb r15550: make sure to pick up the -lresolv libs on systems without -lldap to pull it in
(This used to be commit 4f3a1c2c58)
2007-10-10 11:16:58 -05:00
Gerald Carter
18d5a26f74 r15549: removing rhosts and 'hosts equiv' authentication features
(This used to be commit d19dad8815)
2007-10-10 11:16:58 -05:00
Gerald Carter
745e2490ae r15547: say goodbye to --with-ldapsam (although the ldapsam_compat passdb backend still exists
(This used to be commit 7d99e05ee8)
2007-10-10 11:16:58 -05:00
James Peach
826614ed16 r15508: Use clock_gettime for profiling timstamps if it is available. Use
the fastest clock available on uniprocessors.
(This used to be commit d448629282)
2007-10-10 11:16:55 -05:00
Gerald Carter
af086da4ec r15462: replace the use of OpenLDAP's ldap_domain2hostlist() for
locating AD DC's with out own DNS SRV queries.
Testing on Linux and Solaris.
(This used to be commit cf71f88a3c)
2007-10-10 11:16:49 -05:00
James Peach
584ac985ec r15448: New autoconf macro to test for sysconf variables.
(This used to be commit a19d4f2bb4)
2007-10-10 11:16:46 -05:00
James Peach
4ab90ea08c r15424: Implement a "stacktrace" smbcontrol option using libunwind's remote
stack tracing support. This provides an easy way for users to provide
stack traces (hopefully it will be implemented on something other than
ia64).
(This used to be commit 0b5e07e12d)
2007-10-10 11:16:42 -05:00
James Peach
7fbc91995e r15423: Correct comparison logic so that libunwind can be correctly detected.
(This used to be commit 918f56b6de)
2007-10-10 11:16:42 -05:00
Tim Potter
11cadb6f47 r15289: Put references to $PICFLAGS in quotes. Fixes #3725.
(This used to be commit 2aad5e915c)
2007-10-10 11:16:32 -05:00
Günther Deschner
351e749246 r15240: Correctly disallow unauthorized access when logging on with the
kerberized pam_winbind and workstation restrictions are in effect.

The krb5 AS-REQ needs to add the host netbios-name in the address-list.

We don't get the clear NT_STATUS_INVALID_WORKSTATION code back yet from
the edata of the KRB_ERROR but the login at least fails when the local
machine is not in the workstation list on the DC.

Guenther
(This used to be commit 8b2ba11508)
2007-10-10 11:16:29 -05:00
Günther Deschner
1f19676903 r15080: As discussed with Jerry, remove the CAP_LIBS again (we don't need that
handling anymore when we remove $(LIBS) from pam_winbind again.

Also make sure to build our own copy of iniparser with -fPIC.

Guenther
(This used to be commit e32c4f6f6e)
2007-10-10 11:16:21 -05:00
Gerald Carter
8aa8b0db84 r15074: Remove -lcap from pam_winbind (not needed)
Temporary linking fix for --with-included-iniparser
(gd will do a proper fix later).
(This used to be commit 7d5adcf3a7)
2007-10-10 11:16:21 -05:00
Gerald Carter
8c9eb7631e r15053: fix portabilities issues between 32-bit winbind clients and a 64-bit winbindd server
(This used to be commit a95d11345e)
2007-10-10 11:16:00 -05:00
James Peach
7a5ff0885d r15047: Add support for using libunwind to generate a backtrace. This is
primarily intended for ia64 systems where libunwind knows more about
the different ways of walking the stack that just about anything else.
(This used to be commit 256a19d722)
2007-10-10 11:16:00 -05:00
James Peach
a407405438 r15046: Fix bug #3490 reported by Jason Mader. Do not continue to check for LDAP
and AD requirements if --without-ldap and --without-ads have been given
to configure.
(This used to be commit 1d5e4830d3)
2007-10-10 11:15:59 -05:00
Günther Deschner
c8fabfbf19 r15043: Only build our copy of iniparser when the system doesn't have one.
Guenther
(This used to be commit 5ae22cf46b)
2007-10-10 11:15:59 -05:00
James Peach
4fa5559800 r14898: This change is an attempt to improve the quality of the information that
is produced when a process exits abnormally.

First, we coalesce the core dumping code so that we greatly improve our
odds of being able to produce a core file, even in the case of a memory
fault. I've removed duplicates of dump_core() and split it in two to
reduce the amount of work needed to actually do the dump.

Second, we refactor the exit_server code path to always log an explanation
and a stack trace. My goal is to always produce enough log information
for us to be able to explain any server exit, though there is a risk
that this could produce too much log information on a flaky network.

Finally, smbcontrol has gained a smbd fault injection operation to test
the changes above. This is only enabled for developer builds.
(This used to be commit 56bc02d644)
2007-10-10 11:15:53 -05:00
Jeremy Allison
1d3fd5201c r14746: Add the Samba4 replacements for opendir/readdir etc. to
Samba3 - with some 64-bit macro madness. Attempt to fix
the broken directory handling in the *BSD-of-the-month
club.
Jeremy.
(This used to be commit fd98427f64)
2007-10-10 11:15:45 -05:00
Volker Lendecke
e487835181 r14695: Patch from Björn Jacke:
- add DMAPI/XDSM support for AIX
- find JFS DMAPI libs on Linux when only they are available

Volker
(This used to be commit b6b72f8c6a)
2007-10-10 11:15:44 -05:00
James Peach
40d0707827 r14668: Set the FILE_STATUS_OFFLINE bit by observing the events a DMAPI-based
HSM is interested in. Tested on both IRIX and SLES9.
(This used to be commit 514a767c57)
2007-10-10 11:15:42 -05:00
Lars Müller
853ad11aaf r14659: Fix installpammodules for shells where a
for module in ; do ... ; done

leads to an error (true64, solaris 8).

We now use {,UN}INSTALL_PAM_MODULES to get replaced by configure.
Therfore we don't run into the {,un}installpammodules rule if no PAM
module is requested.

Thanks to Björn Jacke for pointing to this issue.
(This used to be commit 07a70f8f86)
2007-10-10 11:15:42 -05:00
Lars Müller
4ba096740f r14631: Add {,un}installpammodules rule and add it to the install rule.
Nothing happens if PAM_MODULES is empty which is our default.

The default destination dir is "${LIBDIR}/security".  It's possible to
overwrite the default with --with-pammodulesdir while calling configure.
(This used to be commit 7163c68605)
2007-10-10 11:15:40 -05:00
Lars Müller
49ba0a9e20 r14626: Only set libdir and mandir to the defaults if we haven't used --libdir
or --mandir to set them already.  Till now we overwrrote a setting made
with --libdir or --mandir.
(This used to be commit 94980a15be)
2007-10-10 11:15:40 -05:00
Stefan Metzmacher
b40e258870 r14624: - add timelimit.c
- add configure tests --with-selftest-prefix=/tmp/samba-test
  this is needed because the path name of unix socket can only be 108 chars long
- add configure test --with-smbtorture4-path=/home/foo/prefix/samba4/bin/smbtorture
  this will be used to run samba4's smbtorture inside samba3's make test later

metze
(This used to be commit d9df1853b9)
2007-10-10 11:15:39 -05:00
Lars Müller
22183b0c74 r14617: Fix typo in comment.
(This used to be commit df6d69e78f)
2007-10-10 11:15:39 -05:00
James Peach
97ee5b1afa r14600: Refactor capability interface from being IRIX-specific to using only
the POSIX interface. Note that this removes support for inherited
capabilities. This wasn't used, and probably should not be.
(This used to be commit 763f4c0148)
2007-10-10 11:15:39 -05:00
Lars Müller
4b000b2c95 r14584: Really follow with roosbindir by defaulr the setting we use for sbindir.
(This used to be commit 1829d22720)
2007-10-10 11:15:38 -05:00
Lars Müller
9b27791644 r14325: Add pam_modules rule which builds the configure(d) pam modules. This is
called as part of the all rule (again only if pam modules are requested
by configure).

Add pam_winbind rule.

Ensure proto_exists before we build the pam modules.

Add test_pam_modules rule to test if the built pam modules have any
unresolved symbols.  For test_pam_modules we use script/tests/dlopen.sh
which was written by Nalin Dahyabhai <nalin@redhat.com>.  Thanks Nalin!
RedHat and SuSE use this script to test nss and pam modules since
several years.
(This used to be commit 71b2eb55ad)
2007-10-10 11:15:25 -05:00
Günther Deschner
b97a69dce3 r14321: When we have libnscd and winbindd comes (back) online, try to flush the
nscd caches so that NSS-calls can deliver accurate information.

Guenther
(This used to be commit a32a423a0e)
2007-10-10 11:15:24 -05:00
Lars Müller
b372fd2cff r14317: Use source/bin as dir to link pam_winbind instead of source/nsswitch/
The intention is to have the resulting binaries at one place.  This is
also usefull for upcoming changes to provide a test_pammodules rule.

With these changes I even got aware of
testsuite/nsswitch/pam_winbind_syms.exp  But this only covers
pam_winbind.
(This used to be commit 9883957b74)
2007-10-10 11:15:24 -05:00
Günther Deschner
14e904fe86 r14148: Removing the not very well tested krb5 ticket refresh handling activated
over --with-kcm. No time to look after it for the moment.

Guenther
(This used to be commit 7ec2b31a87)
2007-10-10 11:15:13 -05:00
James Peach
f0210601d1 r14111: Work around additional typedefs in the gamin implementation
of the FAM API.
(This used to be commit dc96ce90e5)
2007-10-10 11:11:12 -05:00
Jeremy Allison
433e171482 r14106: Fix from William Jojo for AIX vfs builds. Thanks Bill !
Jeremy.
(This used to be commit 7d50966d7f)
2007-10-10 11:11:12 -05:00