1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
Commit Graph

16908 Commits

Author SHA1 Message Date
Volker Lendecke
e7d7dc94eb r1853: Improved NT->AFS ACL mapping.
Jerry, this is a really localized patch that I've been using at a customer
site for quite a while, I'd like to get that into 3.0.6.

Thanks,

Volker
2007-10-10 10:52:21 -05:00
Jeremy Allison
3cd88f48af r1841: Fix for #1606, can't launch dos exe's.
2 related problems - 1). DOS uses chained commands - when we
are replying with sendfile we neglect to send the chained header. 2). Win9x and
DOS TCP stacks blow up when getting data back from a Linux sendfile - "The
engines canna take the strain cap'n". Don't use sendfile for anything less than NT1.
Jeremy.
2007-10-10 10:52:21 -05:00
Gerald Carter
08037bd442 r1834: prevent infinite recusion in reopen_logs() when expanding the smb.conf variable %I 2007-10-10 10:52:21 -05:00
Gerald Carter
980740da78 r1833: patch from James Peach to get swat to look for index.html by default when given a trailing directory/ 2007-10-10 10:52:21 -05:00
Jeremy Allison
887aa22dc9 r1812: Fix from Richard Renard <rrenard@idealx.com> to be able to reset
a users logon hours restrictions.
Jeremy.
2007-10-10 10:52:21 -05:00
Jeremy Allison
dac72638fb r1810: Patch from Richard Renard <rrenard@idealx.com> to store
logon hours attributes in an LDAP database.
Jeremy.
2007-10-10 10:52:21 -05:00
Jeremy Allison
ac0fdf9503 r1809: Patch from Richard Renard <rrenard@idealx.com> to store
logon hours attributes in an LDAP database.
Jeremy.
2007-10-10 10:52:21 -05:00
Gerald Carter
7e44193be1 r1789: compiler warnings from SuSE 2007-10-10 10:52:20 -05:00
Jeremy Allison
f454821ff5 r1780: Remove the UTC comment as it isn't.
Jeremy.
2007-10-10 10:52:20 -05:00
Jeremy Allison
9ce273ed66 r1778: Fix based on code from Richard Renard <rrenard@idealx.com> to
enforce logon hours. ldap fixes to follow.
Jeremy.
2007-10-10 10:52:20 -05:00
Jim McDonough
edb4e940b4 r1750: This patch allows net ads lookup to rely on command line arguments if contacting an ADS server fails. This allows net ads lookup to work with clapd (very useful for testing).
from aliguori@us.ibm.com
2007-10-10 10:52:20 -05:00
Jeremy Allison
a1bb6fbbe4 r1733: Fix hashed password history for LDAP backends.
Jeremy.
2007-10-10 10:52:20 -05:00
Günther Deschner
153c813464 r1721: Get rid of compiler-warning.
Guenther
2007-10-10 10:52:20 -05:00
Günther Deschner
3677c6a8f6 r1720: Show correct help for net groupmap commands.
Guenther
2007-10-10 10:52:19 -05:00
Volker Lendecke
9a2fd67037 r1716: Get rid of a compiler warning. "pipe" is a symbol that is defined as a system
call, and gcc -Wall complains about a shadowed definition.

Volker
2007-10-10 10:52:19 -05:00
Günther Deschner
925e28d0cb r1698: fix build.
guenther
2007-10-10 10:52:19 -05:00
Günther Deschner
8f1716a29b r1692: first commit :)
* add IA64 to the architecture table of printer-drivers

* add new "net"-subcommands:

  net rpc printer migrate {drivers|printers|forms|security|settings|all}
        [printer]
  net rpc share migrate {shares|files|all} [share]

  this is the first part of the migration suite. this will will (once
  feature-complete) allow to do 1:1 server-cloning in the best possible way by
  making heavy use of samba's rpc_client-functions. all migration-steps
  are implemented as rpc/smb-client-calls; net communicates via rpc/smb
  with two servers at the same time (a remote, source server and a
  destination server that currently defaults to the local smbd). this
  allows e. g. printer-driver migration including driverfiles, recursive
  mirroring of file-shares including file-acls, etc. almost any migration
  step can be called with a migrate-subcommand to provide more flexibility
  during a migration process (at the cost of quite some redundancy :) ).

  "net rpc printer migrate settings" is still in a bad condition (many
  open questions that hopefully can be adressed soon).

  "net rpc share migrate security" as an isolated call to just migrate
  share-ACLs will be added later.

  Before playing with it, make sure to use a test-server. Migration is a
  serious business and this tool-set can perfectly overwrite your
  existing file/print-shares.

* along with the migration functions had to make I the following
  changes:

        - implement setprinter level 3 client-side

        - implement net_add_share level 502 client-side

        - allow security descriptor to be set in setprinterdata level 2
          serverside

guenther
2007-10-10 10:52:19 -05:00
Jeremy Allison
db3dde026b r1684: Patch for bug #1578 based on fix from Alexander E. Patrakov,
<patrakov@ums.usu.ru>. Main change, hardcode replacement char
to '_' as I really don't want a new parameter.
Jeremy.
2007-10-10 10:52:18 -05:00
Jeremy Allison
31505acf03 r1681: Ensure we return the same ACL revision on the wire that W2K3 does.
Jeremy.
2007-10-10 10:52:18 -05:00
Gerald Carter
6778db6110 r1668: fixing bug in spec file when installing libsmbclient 2007-10-10 10:52:18 -05:00
Jeremy Allison
1b0c70cf97 r1665: Patch from James Peach @ SGI to stop using sendfile if it isn't
supported by the underlying OS.
Jeremy.
2007-10-10 10:52:18 -05:00
Gerald Carter
6e4c58b26d r1663: fixing syntax error in OID for sambaUnixIdPool, sambaSidEntry, & sambaIdmapEntry 2007-10-10 10:52:18 -05:00
Jeremy Allison
82e4036aaa r1661: Changed the password history format so that each history entry
consists of a 16 byte salt, followed by the 16 byte MD5 hash of
the concatination of the salt plus the NThash of the historical
password. Allows these to be exposed in LDAP without security issues.
Jeremy.
2007-10-10 10:52:17 -05:00
Volker Lendecke
d5060c30e3 r1658: Expand aliases for getusersids as well.
Volker
2007-10-10 10:52:17 -05:00
Vance Lankhaar
1a33999cf0 r1656: Patch from James Peach:
> This patch is (probably) needed for all systems that don't have a
> C99/UNIX98 compliant vsnprintf by default. The builtin sm_*printf
> were no being called, causing things like talloc_init to fail, with
> predictable results.

The should fix 6 (solaris/hpux/irix) builds on the build farm.

Vance
2007-10-10 10:52:17 -05:00
Volker Lendecke
e9263a5204 r1638: Dont always uppercase "afs username map" 2007-10-10 10:52:17 -05:00
Steve French
2bd2800715 r1616: Fix user unmount of shares mount with suid mount.cifs 2007-10-10 10:52:17 -05:00
Jeremy Allison
8d355b9b9d r1613: Patch from Tom Shaw <tomisfaraway@gmail.com> to use
winbindd_fill_pwent consistently.
Jeremy.
2007-10-10 10:52:16 -05:00
Andrew Bartlett
3baa4ef6c5 r1612: Fix bug #1571 found by Guenter Kukkukk <guenter.kukkukk@kukkukk.com>
(Botched LANMAN2 session setup code)

Andrew Bartlett
2007-10-10 10:52:16 -05:00
Jeremy Allison
4fd619d7e1 r1610: Patch from Richard Renard <rrenard@idealx.com>. Ensure we
save the password as it is being changed into the password
history list.
Jeremy.
2007-10-10 10:52:16 -05:00
Jeremy Allison
23d157a0be r1608: Fix from Nick THOMPSON <nickthompson@agere.com> to protect smbd
against broken filesystems which return zero blocksize.
Jeremy.
2007-10-10 10:52:16 -05:00
Tim Potter
2063b8d9bc r1599: Use -Bsymbolic when creating shared libraries to avoid conflicts with
identical symbols in the global namespace when loading libnss_wins.so.
Bugzilla #1360.
2007-10-10 10:52:16 -05:00
Volker Lendecke
2d68fdf06b r1590: Small fixes from Günther Deschner 2007-10-10 10:52:16 -05:00
Volker Lendecke
269f075087 r1588: This is one of the more pathetic patches I ever checked in. Many hours of
coding have passed, but I could not find a way to get the OpenLDAP libraries
to reliably time out on any of the queries we make, *and* get correct error
returns. No, async calls and ldap_result does NOT work, or I was simply too
stupid to correctly interpret the OpenLDAP manpage and source.

We can not allow to hang indefinitely in an ldap query, especially not for
winbindd. "ldap timeout" now specifies the overall timeout for the complete
operation, that's why I increased that to 15 seconds.

Volker
2007-10-10 10:52:16 -05:00
Andrew Bartlett
35aabae9d9 r1583: Patch by Fabien Chevalier <fabien.chevalier@supelec.fr>
We may not have any interfaces up at all, so initialise the return variable.

Fixes Debian bug #252591

Andrew Bartlett
2007-10-10 10:52:15 -05:00
Andrew Bartlett
5bd6abb54e r1582: On failure, print the length of the right variable.
Andrew Bartlett
2007-10-10 10:52:15 -05:00
Andrew Bartlett
554a913287 r1581: 'NULL' NTLMSSP is both a pain to get right, and compleatly and utterly
pointless.  With a well-known session key, we may as well put the
password change directly on the wire, with it's own 'crypted with old
password' as the protection.

This should fix some 'long password change' issues, against Samba in
particular.

Andrew Bartlett
2007-10-10 10:52:15 -05:00
Gerald Carter
11c6ca1c3c r1572: setting version to 3.0.7pre1; I will pull back changes into 3.0.6rc2 manually 2007-10-10 10:52:15 -05:00
Gerald Carter
430cf63b91 r1570: merging changes from 3.0.5 2007-10-10 10:52:15 -05:00
Volker Lendecke
acfbd34025 r1562: Make winbind for -S (sid->uid) and -Y (sid->gid) check whether the sid
requested actually is of type asked for. I've come across more than one
installation where a group sid had ended up as a uid in idmap and vice
versa. This just closes one possible for this misconfiguration, people
are actually using wbinfo.

Volker
2007-10-10 10:52:15 -05:00
Gerald Carter
62bd60e445 r1561: iconv detection fix from James Peach <jpeach@sgi.com> 2007-10-10 10:52:15 -05:00
Volker Lendecke
530e7f09ae r1560: Not that anybody uses this stuff (yet...), but at least get it correct :-)
When sending a mailslot datagram, get the packet length correction correct.

Volker
2007-10-10 10:52:14 -05:00
Richard Sharpe
e3dc7934b5 r1557: Add sigchld handling to winbindd. Next step is to have the child restarted if
need be. We should also make sure the main line know we no longer have a child.
2007-10-10 10:52:14 -05:00
Jeremy Allison
bd64f0c081 r1553: Good patch from Guenther Deschner <gd@sernet.de> to display share ACL
entries from rpcclient.
Jeremy.
2007-10-10 10:52:14 -05:00
Jeremy Allison
14bd2a9ffc r1539: If a account was locked out by an admin (and has a bad password count of zero)
leave it locked out until an admin unlocks it (but log a message).
Jeremy.
2007-10-10 10:52:14 -05:00
Jeremy Allison
bb3a0fa61f r1537: Fix to stop printing accounts from resetting the bas password
and account lockout flags. This is set when an account is updated
only from smbd or pdbedit. Bug found by "Dunn, Drew A." <Drew.Dunn@jhuapl.edu>.
Jeremy.
2007-10-10 10:52:14 -05:00
Volker Lendecke
128951cfe4 r1532: Remove unused structure element 2007-10-10 10:52:14 -05:00
Volker Lendecke
359b9dcffe r1531: smbd/tdbutil.c isn't used anymore. Bug 1443 is suspected to be a tdb
corruption problem, and smbd_log_tdb happily destoyed the evidence ....

Volker
2007-10-10 10:52:13 -05:00
Jeremy Allison
9d6347be85 r1506: Fix inspired by patches from Michael Collin Nielsen <michael@hum.aau.dk> - ensure
home directory service number is correctly reused.
Jeremy.
2007-10-10 10:52:13 -05:00
Jeremy Allison
a3589a18b6 r1504: Remove insane use of "user password" on the COMMAND LINE !
in smbpasswd. Use -s if you want to script this.
Jeremy.
2007-10-10 10:52:13 -05:00