1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00

12400 Commits

Author SHA1 Message Date
Gerald Carter
44e6c30f71 fix bug #208; have to get the gid of the user's primary group for %G
(This used to be commit 575483a1efe18a90055490117ba6894512ae568a)
2003-08-06 19:16:17 +00:00
Gerald Carter
df2337692a rework winbindd_accountdb_init() to reduce error messages in the log
(This used to be commit d98a68e0ebaf2fbd360b826f5df472bc3f94285b)
2003-08-06 18:01:39 +00:00
Volker Lendecke
923cb1b731 When doing 'net groupmap add', default to algorithmic mapping for the rid.
Volker
(This used to be commit 7ce94d39add6e056e3b1deea21bf0438ba61e4cc)
2003-08-06 09:24:11 +00:00
Tim Potter
74be920b0e Spelling.
(This used to be commit 7d009ebf66c82b254828bac267102eb6e6a4a75e)
2003-08-06 01:14:51 +00:00
Gerald Carter
269bcd91a3 oops; fix typo. Noticed by gcc warning
(This used to be commit 4c36ef65e5101899f730adaeacf754f5f3647d89)
2003-08-06 00:06:37 +00:00
Gerald Carter
055b7df499 fix bug #245; local_lookupsid() needed to make a getpwuid() call to get the username instead of making up unix_user.##
(This used to be commit b947fc3eed464d7a64914f3965964d29be031614)
2003-08-05 23:24:14 +00:00
Volker Lendecke
a4954bd3d2 Changes to make gss-spnego ntlmssp client work against W2k AD.
Now I know where the mechListMIC changes came from: Ethereal ;-)

Volker
(This used to be commit 4e9eed1273035d09ac3b427b9711327ba8c6ebfc)
2003-08-04 13:10:43 +00:00
Tim Potter
05540b48f0 Fix unused variable warning.
(This used to be commit 73d02e3a2b0f9e84ab6d8685e4ad6a03ef9249b2)
2003-08-04 06:16:03 +00:00
Tim Potter
cdf562f5b2 Memory leak fix for create_rpc_bind_req()
(This used to be commit 4d26feabd75d5b298276b0c5880b9765507bb6ae)
2003-08-04 02:51:30 +00:00
Tim Potter
5216cb0f36 More patches from Brett:
- remove 'if(mem_ctx)' tests prior to 'talloc_destroy' call to make
consistent with other modules; 'talloc_destroy' already test for NULL
anyway.

  - initialize PyObject* result pointers to NULL in function
declarations; enables removal of redundant NULL assignments.

  - use local scope TALLOC_CTX in lsa_lookup_names to prevent unbounded
memory growth during python policy object lifetime.

  - change context name string used in lsa_lookup_sids from
'lsa_open_policy' to 'lsa_lookup_sids' (cut'npaste oversight from
previous patch)

  - change docstring to match module name (apparently another cut'npaste
situation)
(This used to be commit 98cac74c67c454f636df5c1ea2baa029c482e402)
2003-08-04 00:50:00 +00:00
Tim Potter
5d070d89a8 Fix memory leak in py_smb_set_setdesc()
Consistency fixups in py_smb_query_secdesc()

Thanks to Brett A. Funderburg for these patches.
(This used to be commit 6c33189e50ae3704275198e324fcdb7facd209f7)
2003-08-04 00:48:49 +00:00
Jeremy Allison
99a4bb07a9 Fix up #defines around utmp_host and utmp_name. Noticed by Cord.Hockemeyer@uni-graz.at
Jeremy.
(This used to be commit 07c5ecb945c1189fd6e8628f5e989b90dd15163b)
2003-08-03 18:50:00 +00:00
Jeremy Allison
8d992a7102 Output message saying "signed connect" instead of just connect when signing
is active.
Jeremy.
(This used to be commit c6674fa62865b64aa788a1903db118e4d773bcae)
2003-08-03 07:20:05 +00:00
Jeremy Allison
a8646708e3 Fix oplock break detection code on incoming oplock break responses. This
fixes signing for oplocks.
Jeremy.
(This used to be commit 69c56ee8bce122839a8fec4e59198f84b0757166)
2003-08-03 07:12:46 +00:00
Gerald Carter
b1fc491251 make sure to initialize the backend methods when enumerating sequence numbers; reported by Ken Cross
(This used to be commit 10c7a1af67e556c17d4b3495934a2dad19728d77)
2003-08-02 18:15:33 +00:00
Jeremy Allison
b925d197f5 Ensure we don't leak any sign records on cancel of pending requests.
Jeremy.
(This used to be commit 9a8ffc239c0f1aada713de7e9e007066738d8874)
2003-08-02 08:48:01 +00:00
Jeremy Allison
9482f14b2c Only look for mid sign records on incoming packets for oplock break replies.
Otherwise we find spurious mid sign records on reply_ntcancel calls (they cancel
by mid). That took a *lot* of tracking down. I still need to remove the mid
records from the sign state on reply_ntcancel to avoid leaking memory....
Jeremy.
(This used to be commit 270bf20fe3e226ab5cfc689bd20ed4c22b2fa7e6)
2003-08-02 08:38:34 +00:00
Jeremy Allison
099bd33a99 More fixes for client and server side signing. Ensure sequence numbers
are updated correctly on returning an error for server trans streams.
Ensure we turn off client trans streams on error.
Jeremy.
(This used to be commit 3a789cb7f01115c37404e5a696de363287cb0e5f)
2003-08-02 07:07:38 +00:00
Jeremy Allison
a202afb881 Leave the packet sequence checkers enabled whilst I track down a smbclient -> smbd
sequence number problem.
Jeremy.
(This used to be commit 844898dbd8e99837ef1621aa73024714aa819ce4)
2003-08-02 03:12:39 +00:00
Jeremy Allison
760e58cf80 Add the same signing code to the server. Ensure we use identical session
numbers and MIDs when in trans/trans2/nttrans code.
Jeremy.
(This used to be commit 901544b29b4d815709b3dbad3012f1d2c419d904)
2003-08-02 03:06:07 +00:00
Jeremy Allison
2443f7ffa2 Correct fix (removed the earlier band-aid) for what I thought was a signing
bug with w2k. Turns out that when we're doing a trans/trans2/nttrans call
the MID and send_sequence_number and reply_sequence_number must remain constant.
This was something we got very wrong in earlier versions of Samba. I can now
get a directory listing from WINNT\SYSTEM32 with the older earlier parameters
for clilist.c
This still needs to be fixed for the server side of Samba, client appears to
be working happily now (I'm doing a signed smbtar download of an entire W2K3
image to test this :-).
Jeremy.
(This used to be commit 2093a3130d4087d0659b497eebd580e7a66e5aa3)
2003-08-02 00:29:45 +00:00
Jeremy Allison
72a8b31303 Fix the option processing for smbtar. Does no one check this !
Jeremy.
(This used to be commit c4af1ec73584656fb9d2b372461da4748e1643f1)
2003-08-01 21:09:10 +00:00
Herb Lewis
bfb312800f add tests for IRIX attr functions
(This used to be commit ea57a57db036de6245ff44cd953dae3b482b4744)
2003-08-01 19:45:12 +00:00
Jim McDonough
8c64504f7c Update my copyrights according to my agreement with IBM
(This used to be commit a2bd8f0bfa12f2a1e33c96bc9dabcc0e2171700d)
2003-08-01 15:30:44 +00:00
Jim McDonough
9f2e6167d2 Update my copyrights according to my agreement with IBM
(This used to be commit c9b209be2b17c2e4677cc30b46b1074f48878f43)
2003-08-01 15:21:20 +00:00
Jim McDonough
f210ee9b99 Fix copyright statements for various pieces of Anthony Liguori's work.
(This used to be commit 15d2bc47854df75f8b2644ccbc887d0357d9cd27)
2003-08-01 14:47:39 +00:00
Gerald Carter
10ba66164d fix cut-n-paste error found by abartlet
(This used to be commit 042492b862c4f2389086275dd8a0e044d7432537)
2003-08-01 13:28:13 +00:00
Volker Lendecke
f5b5a9793a Add ntlmssp client support to ntlm_auth. Find the corresponding cyrus sasl
module under http://samba.sernet.de/cyrus-gss-spnego.diff

Volker
(This used to be commit a82f6a00969f7ea377626c28ec05ace04f8135a9)
2003-08-01 07:59:23 +00:00
Volker Lendecke
66ba34188c Fix a memory leak. I did not check all the calls to winbindd_request, but
we might leak the extra_data somewhere else as well.

Volker
(This used to be commit 5d379345fa06f4253f67b40cb8127b70072db561)
2003-08-01 07:46:42 +00:00
Volker Lendecke
a34ba76435 locking.c now refers to map_nt_error_from_unix, so link it in with
smbstatus and smbcontrol

Volker
(This used to be commit c2c901e06b9723e33cccdb592c609072b4376c10)
2003-08-01 07:45:02 +00:00
Jeremy Allison
d574b612e4 Finish reformatting.
Jeremy.
(This used to be commit 5ef75fa36620a87e8fd8567b854ea0770d8125ea)
2003-08-01 06:29:16 +00:00
Jeremy Allison
ef915c8eaf Final fix for the bug tridge found. Only push locks onto a blocking lock
queue if the posix lock failed with EACCES or EAGAIN (this means another
lock conflicts). Else return an error and don't queue the request.
Jeremy.
(This used to be commit 43fbc18fdc184bf29c15186c16bc99fb208de963)
2003-08-01 06:10:30 +00:00
Jeremy Allison
7e39e87ce0 Reformat lots of clitar code as I hate the style so much :-).
Jeremy.
(This used to be commit 77f2a91549c8b61e74e2088faef2b61612803aed)
2003-08-01 01:03:05 +00:00
Jeremy Allison
14f207be92 Reformat clitar option processing - getting ready to fix it for popt...
Jeremy.
(This used to be commit 94b30e7b4a4f71d3aa2fefee60b9ea8ead2acccd)
2003-08-01 00:41:57 +00:00
Andrew Tridgell
f1e71ed1b9 CVAL_NC() doesn't need the (unsigned) fix and breaks the IRIX build
Thanks to Herb for pointing this out!
(This used to be commit 87ede8d310db10d92b4ff57e67d3b53cbb7697fb)
2003-07-31 23:22:21 +00:00
Gerald Carter
0da36b22ff only honor the first OID in the sessetup snego negotiate. Deviates
from RFC but I'm smelling a client bug here.

	/* only look at the first OID for determining the mechToken --
	   accoirding to RFC2478, we should choose the one we want
	   and renegotiate, but i smell a client bug here..

	   Problem observed when connecting to a member (samba box)
	   of an AD domain as a user in a Samba domain.  Samba member
	   server sent back krb5/mskrb5/ntlmssp as mechtypes, but the
	   client (2ksp3) replied with ntlmssp/mskrb5/krb5 and an
	   NTLMSSP mechtoken.                 --jerry              */
(This used to be commit 731420b03dbc15977822f74047e931dc62284fc0)
2003-07-31 19:01:22 +00:00
Alexander Bokovoy
f86708be99 Return proper error when it is impossible to change quota flags
(This used to be commit 44bae9da9e03a1df738367f8d86adb0f315da41f)
2003-07-31 17:08:38 +00:00
Volker Lendecke
c13fac26c5 Fix off-by-one found by valgrind.
Volker
(This used to be commit bc39c9b57fa6258674e1ee44b3446f25bf63661e)
2003-07-31 15:53:59 +00:00
Volker Lendecke
34b15df02d spnego.c has function definitions. Prototype them.
Anybody familiar with Makefile.in could you please look at this?
This is probably the wrong way to fix this.

Volker
(This used to be commit 9a04750dea1b614604e6f9a0f69a251391994a71)
2003-07-31 15:53:26 +00:00
Volker Lendecke
deb62c1410 Fixes for memory leaks in gss spnego handling by aliguori.
Volker
(This used to be commit 946695242f0a6db0e8c712f9bd97ac3cb99c4119)
2003-07-31 10:24:10 +00:00
Volker Lendecke
2f81ccefa2 This fixes an error I must have made when playing with spnego.c found
by aliguori: NegTokenInit.mechListMIC is an Octet String.

Second: add a free_spnego_data function.

Both thanks to aliguori.

Volker
(This used to be commit 6c252440fba33eb69827d5515a95fbb3e8e9a653)
2003-07-31 10:23:13 +00:00
Volker Lendecke
62ef886bee Apply some const
(This used to be commit 692ff44ba39cd24dbc906e0319bc51c8be9cc267)
2003-07-31 10:21:13 +00:00
Gerald Carter
3543399eac make sure the domain sid is set when enumerating trusted domains
(we don't always get it back)
(This used to be commit 6e8f23d1b1dd5122691cd9363a5c572fcab182af)
2003-07-31 06:37:37 +00:00
Gerald Carter
0d087e3ba2 working on transtive trusts issue:
* use DsEnumerateDomainTrusts() instead of LDAP search.
    wbinfo -m now lists all trusted downlevel domains and
    all domains in the forest.

Thnigs to do:

  o Look at Krb5 connection trusted domains
  o make sure to initial the trusted domain cache as soon
    as possible
(This used to be commit 0ab00ccaedf204b39c86a9e1c2fcac5f15d0e033)
2003-07-31 05:43:47 +00:00
Tim Potter
48c01deb30 Whoops - this is probably better shell syntax.
(This used to be commit 4644085b682c806796f9acf2ed73de9dd9872738)
2003-07-31 04:28:43 +00:00
Tim Potter
04b4c100c3 Turn on automatic winbindd support for FreeBSD and see what the compile farm
thinks of it.
(This used to be commit e6210295e4daa5f1768616b4d8390a173c5c67ae)
2003-07-31 04:27:41 +00:00
Andrew Tridgell
ddf3c6d5cc This is a critical bug fix for a data corruption bug. If you
maintain another tree then please apply!

On non-X86 machines out byte-order macros fails for one particular
value. If you asked for IVAL() of 0xFFFFFFFF and assigned it to a 64
bit quantity then you got a 63 bit number 0x7FFFFFFFFFFFFFFF rather
than the expected 0xFFFFFFFF. This is due to some rather bizarre and
obscure sign extension rules to do with unsigned chars and arithmetic
operators (basically if you | together two unsigned chars you get a
signed result!)

This affected a byte range lock using the large lockingX format and a
lock of offset 0 and length 0xFFFFFFFF. Microsoft Excel does one of
these locks when opening a .csv file. If the platform you run on does
not then handle locks of length 0x7FFFFFFFFFFFFFFF then the posix lock
fails and the client is given a lockingX failure. This causes the .csv
file to be trunated!!
(This used to be commit 886661c3777dbfd4fa431746c8a5f48674a12b8e)
2003-07-31 04:01:32 +00:00
Jeremy Allison
ba12e6bb5f Wrap calls to change_oem_password() in become_root()/unbecome_root() pairs
to allow UNIX password change scripts to work correctly. This is safe as
the old password has been checked as correct before invoking this.
Jeremy.
(This used to be commit 1734d43eb55561d46a6ffb5d806afedfd3746f9f)
2003-07-31 01:33:44 +00:00
Jeremy Allison
aa7f82c5cc Turn the 'doing_signing' variable on - fix bug where it was only being set
on when signing was mandatory.
Jeremy.
(This used to be commit 7c58673a103195435ca75ebb2684880d1f7242d3)
2003-07-31 00:30:01 +00:00
Jeremy Allison
29ca70cd34 Add a command line option (-S on|off|required) to enable signing on client
connections. Overrides smb.conf parameter if set.
Jeremy.
(This used to be commit 879309671df6b530e0bff69559422a417da4a307)
2003-07-30 23:49:29 +00:00