1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

82750 Commits

Author SHA1 Message Date
Jeremy Allison
f5a2379794 In vfs modules, don't use 'conn->origpath' when we really mean 'conn->cwd'.
This allows VFS modules to work even when we've changed directory
under the connect path in order to do root-safe calls.

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Sep 12 23:45:23 CEST 2012 on sn-devel-104
2012-09-12 23:45:22 +02:00
Jeremy Allison
b6636affaf Move cached cwd onto conn struct.
This enables us to make VFS modules safe for use in root called
code when we've changed directory under conn->connectpath.
2012-09-12 22:06:06 +02:00
Jeremy Allison
a8676e69a6 Remove ancient "optimization" global LastDir. 2012-09-12 22:06:06 +02:00
Simo Sorce
893b213876 Avoid overriding default ccache for ads operations.
Avoid overriding default ccache for ads operations.

Nowadays various samba components may need to use GSSAPI and a default cred
cache to perform their tasks.
This code was completely overriding the whole process default ccache name, thus
altering the current credentials and sometimes hijacking them (or getting
preemptively hijaked).

By using gss_krb5_import_cred we can instead use a private ccache (necessary
sometimes to use a different set of credentials fromt he default
cifs/fqdn@realm one, for example when contacting foreign DCs using trust
credentials) that does not affect the rest of the process.

For the kerberos versions which don't have gss_krb5_import_cred
we fallback to temp override of KRB5CCNAME and gss_acquire_cred.

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>

Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104
2012-09-12 21:18:09 +02:00
Stefan Metzmacher
a11e45f1c5 selftest: let provision_plugin_s4_dc use SMB3
metze

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Sep 12 18:30:48 CEST 2012 on sn-devel-104
2012-09-12 18:30:48 +02:00
Andrew Bartlett
72720d6ea0 wintest: Fix --use-ntvfs handling
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12 16:51:29 +02:00
Andrew Bartlett
ee4d1c4062 wintest: Rework support for the internal DNS server
We still have to run BIND, the change is if BIND is run to support our own
zone, or if we forward to as well as to windows.

This also adapts to the new defaults.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12 16:51:29 +02:00
Kai Blin
fee75752fb s4 provision: Ask for the dns forwarder IP address during interactive provision
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12 16:51:29 +02:00
Andrew Bartlett
1627fcda3e dns_server: Remove parameter 'dns recursive queries' and base this on 'dns forwarder'
This simplifies a very common configuration.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
5cac79abce wintest: try to fix settings for the internal dns server
metze
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
1b848ecbff lib/param: change the default for 'allow dns updates' to 'secure only'
metze
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
ea1841ee10 lib/param: add some more alias for 'allow dns updates' options.
metze
2012-09-12 16:51:29 +02:00
Kai Blin
2df6142439 WHATSNEW.txt: Update DNS server description
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
9583366d1e s4:dns_server: remove wrong and unused dsdb_check_access_on_dn() check
metze
2012-09-12 16:51:29 +02:00
Andrew Bartlett
61a07df824 dns_server: Attempt to SET and UNSET the sessionInfo to match the incoming user
This avoids re-opening the DB as the correct user, but applies all the right ACLs
and resulting owner.

This needs a bit more testing...

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Kai Blin <kai@samba.org>
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
c4aef88b32 s4:samba_upgradedns: delete dns-HOSTNAME account if using the internal dns server
metze
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
1e00c0dcec selftest:Samba4: don't provision with BIND9_DLZ
metze
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
0c55510a0d s4:upgradehelpers.py: don't require a dns-$HOSTNAME account
metze
2012-09-12 16:51:29 +02:00
Stefan Metzmacher
50084e5732 s4:provision: don't add the dns-HOSTNAME account if we use the internal dns server
metze
2012-09-12 16:51:29 +02:00
Kai Blin
6ff5884713 loadparm: dns is now a default server service 2012-09-12 16:51:29 +02:00
Kai Blin
56058ea597 s4 dns: use the internal DNS server per default 2012-09-12 16:51:29 +02:00
Kai Blin
2af8129085 s4 dns: Add libaddns-based simple tests 2012-09-12 16:51:29 +02:00
Kai Blin
76801b502d s4 dns: Run python tests in fl2003dc env 2012-09-12 16:51:29 +02:00
Kai Blin
cf3aab61fa s4 dns: Improve logging of delegated dns updates 2012-09-12 16:51:29 +02:00
Stefan Metzmacher
aa1e84ae60 s4:selftest: run thet dlz_bind9. tests in the chgdcpass env
metze
2012-09-12 16:51:29 +02:00
Björn Jacke
51a409455d s3: remove unneeded noquota.c file
Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Wed Sep 12 16:50:50 CEST 2012 on sn-devel-104
2012-09-12 16:50:50 +02:00
Andreas Schneider
1f8c9ab88e s3-rap: Open printers with the right access mask.
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Sep 12 14:05:42 CEST 2012 on sn-devel-104
2012-09-12 14:05:42 +02:00
Andreas Schneider
937cdd1e46 docs: Build manpages correctly. 2012-09-12 12:21:29 +02:00
Andreas Schneider
66a87d7cbe wafsamba: Add a SAMBAMANPAGES function. 2012-09-12 12:21:29 +02:00
Andreas Schneider
66d926fa2d docs: Bump version up to 4.0. 2012-09-12 12:21:29 +02:00
Karolin Seeger
2eb429d906 docs: Fix typo.
Karolin

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Wed Sep 12 12:21:00 CEST 2012 on sn-devel-104
2012-09-12 12:21:00 +02:00
Alexander Bokovoy
45f8f97937 lib/krb5_wrap: when deleting default realm, pass char*, not char**
Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
Autobuild-Date(master): Wed Sep 12 10:33:37 CEST 2012 on sn-devel-104
2012-09-12 10:33:37 +02:00
Alexander Bokovoy
d55980ccad s3-pdb: filter out more symbols only used in ldapsam internals 2012-09-12 08:49:32 +02:00
Stefan Metzmacher
34bd3cba7a WHATSNEW: provision and updateprovision have new names
metze

Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Sep 12 08:48:16 CEST 2012 on sn-devel-104
2012-09-12 08:48:16 +02:00
Stefan Metzmacher
2c4255084a s4:scripting: rename upgradeprovision -> samba_upgradeprovision
metze
2012-09-12 07:07:27 +02:00
Stefan Metzmacher
a0baaf2064 s4:setup: remove standalone 'provision'
metze
2012-09-12 07:07:27 +02:00
Andrew Bartlett
e8375ddf2d smbd: Add extra VFS hooks to get the posix ACL as a blob
This will allow us to hash this, rather than the NT ACL it maps to.
This will in turn allow us to know if the NT ACL is valid even if we
have to change the mapping code.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Wed Sep 12 07:06:01 CEST 2012 on sn-devel-104
2012-09-12 07:06:01 +02:00
Andrew Bartlett
6638d10366 smbd: Remove pre-allocation of ACL array in sys_acl_init()
Instead, this is just handled with realloc in sys_acl_create_entry()

This allows us to remove the size element from the SMB_ACL_T.

Andrew Bartlett
2012-09-12 05:26:16 +02:00
Andrew Bartlett
ac804f0d7f smbd-posix_acls: Use a IDL union to store the ACL entry
This is a clearer, long-term-stable structure we can hash without
risking it changing.

Andrew Bartlett
2012-09-12 05:26:16 +02:00
Jeremy Allison
bd2f1604d7 Make metze happy and the code clearer :-).
Ensure we know after the destructor fires we're never going to
look at this again.

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Sep 12 03:00:21 CEST 2012 on sn-devel-104
2012-09-12 03:00:20 +02:00
Luca Lorenzetto
4e595f4bf0 nsswitch: fix crash on null pam change pw response
The function _pam_winbind_change_pwd crashes due to a null value passed
to the function strcasecmp and denies to login via graphical login
manager. Check for a null value before doing a strcasecmp.

Bug-Ubuntu: https://bugs.launchpad.net/bugs/1003296
Bug: https://bugzilla.samba.org/show_bug.cgi?id=9013

Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Wed Sep 12 00:07:28 CEST 2012 on sn-devel-104
2012-09-12 00:07:28 +02:00
Michael Adam
df5f962c60 s4:torture:smb2: fix error reporting in the oplock-brl3 test
(Error was set to an unused variable)

Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Tue Sep 11 22:09:18 CEST 2012 on sn-devel-104
2012-09-11 22:09:18 +02:00
Michael Adam
439c907f6b s4:torture:smb2: fix error reporting in the oplock-brl2 test
(Error was set to an unused variable)
2012-09-11 20:10:08 +02:00
Michael Adam
e9df135ca5 s4:torture:smb2: fix error reporting in the oplock-brl1 test
(Error was set to an unused variable)
2012-09-11 20:10:08 +02:00
Michael Adam
c960e55fbf s4:torture:smb2: remove an unused variable from the oplock-exclusive2 test 2012-09-11 20:10:07 +02:00
Michael Adam
7c6f1fb294 s4:torture:smb2: remove an unused variable from the oplock-exclusive1 test 2012-09-11 20:10:07 +02:00
Jeremy Allison
7c1fd74ba5 At Michael's suggestion, factor common code into a function. My bad :-).
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Sep 11 20:08:37 CEST 2012 on sn-devel-104
2012-09-11 20:08:37 +02:00
Andrew Bartlett
33d9a22dcb smbd: Print ACL used to create hash in vfs_xattr_common
This should help us understand why sometimes an ACL set won't stick.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Sep 11 18:19:53 CEST 2012 on sn-devel-104
2012-09-11 18:19:53 +02:00
Andrew Bartlett
6fbce905db provision: Only give the "no posix ACLs" exception if we could not set the SD
This will allow us to run make test on all platforms again, as we emululate the posix ACLs using the fake_acls
module.  By then testing smbd.have_posix_acls() we gain a more specific error message.

Andrew Bartlett
2012-09-11 16:25:36 +02:00
Andrew Bartlett
1a3d6de20a torture: Add discard_const_p() to work around dlz_create prototype 2012-09-11 16:25:35 +02:00