1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-21 12:23:50 +03:00
Commit Graph

149 Commits

Author SHA1 Message Date
Jelmer Vernooij
24e1030090 r11244: Relative path names in .mk files 2007-10-10 13:45:06 -05:00
Andrew Bartlett
ab5dbbe10a r11239: Use ${REALM} for the realm in rootdse.ldif
Add the kpasswd server to our KDC, implementing the 'original' and
Microsoft versions of the protocol.

This works with the Heimdal kpasswd client, but not with MIT, I think
due to ordering issues.  It may not be worth the pain to have this
code go via GENSEC, as it is very, very tied to krb5.

This gets us one step closer to joins from Apple, Samba3 and other
similar implementations.

Andrew Bartlett
2007-10-10 13:45:06 -05:00
Jelmer Vernooij
7fffc5c917 r11214: Remove scons files (see http://lists.samba.org/archive/samba-technical/2005-October/043443.html) 2007-10-10 13:45:03 -05:00
Volker Lendecke
3821a17bdb r11181: Implement wbinfo -s and wbinfo --user-sids. The patch is so large because
--user-sids required the extension to trusted domains.

Implement "winbind sealed pipes" parameter for debugging purposes.

Volker
2007-10-10 13:44:57 -05:00
Stefan Metzmacher
d49a1d2b15 r11089: start the winsreplication task when we run with wins support = yes
metze
2007-10-10 13:44:46 -05:00
Jelmer Vernooij
d2f80c0457 r10588: Remove more unused files, macros 2007-10-10 13:39:08 -05:00
Jelmer Vernooij
b53313dc51 r10586: Add MergedObject() builder. Default to Library() rather
then StaticLibrary()
2007-10-10 13:39:08 -05:00
Jelmer Vernooij
a5b88bcd42 r10513: Reduce some use of pstring. The main reason some parts of the code still
use pstring is next_token() now.
2007-10-10 13:38:58 -05:00
Jelmer Vernooij
703ffbaaac r10478: More work on proto headers; we now generate a couple of smaller ones
that are then included by include/proto.h
2007-10-10 13:38:52 -05:00
Jelmer Vernooij
f142c15de1 r10374: Add HAVE_* defines (on command-line or in config.h file) for scons +
some other minor updates
2007-10-10 13:38:33 -05:00
Jelmer Vernooij
22f18a8424 r10366: More scons fixes. Building et, asn1, lex and yacc files sort-of works now 2007-10-10 13:38:32 -05:00
Jelmer Vernooij
4f0d7f75b9 r10348: Add scons scripts for remaining subsystems. Most subsystems build now,
but final linking still fails (as does generating files asn1, et, idl and proto
files)
2007-10-10 13:38:30 -05:00
Jelmer Vernooij
4bffe44359 r10330: Add SConscript to more subsystems. Some of the tdb tools build now.
Start on custom Samba scons tools (for handling proto generation, pidl, etc)
2007-10-10 13:38:28 -05:00
Tim Potter
540a3649e8 r10328: Add more emacs python-mode markers. 2007-10-10 13:38:28 -05:00
Jelmer Vernooij
829568d759 r10323: Add first bits required for getting compile with scons working. This does
not work yet and can exist parallel with the existing build system.
2007-10-10 13:38:25 -05:00
Jelmer Vernooij
0963ab9c14 r10316: More dynconfig fixes 2007-10-10 13:38:17 -05:00
Andrew Bartlett
31e755c2ce r10314: Apply the controvertial 'server role =' patch after discussion on the list:
This patch removes the 'domain logon' and 'domain master' controls from
Samba4, in favour of a 'server role =' that users can actually
understand.

We can expand the list of roles as needed, and nobody has to figure out
what a 'domain master' actually means.

Andrew Bartlett
2007-10-10 13:38:16 -05:00
Andrew Bartlett
f6a6456441 r10291: The patch optionally (off by default, not available in all cases) allows
Samba to use the target principal name supplied in the mechTokenMIC of
an SPNEGO negTokenInit.

This isn't a great idea for security reasons, but is how Samba3 behaves,
and allows kerberos to function more often in some environments.  It is
only available for CIFS session setups, due to the ordering of the
exchange.

Andrew Bartlett
2007-10-10 13:38:13 -05:00
Jelmer Vernooij
6685009f6a r10245: Get rid of XFILE in a few places.
Add fdprintf() and vfdprintf() helper functions.
2007-10-10 13:38:11 -05:00
Jelmer Vernooij
213bcb7e16 r9826: Add some more OOM checks 2007-10-10 13:36:15 -05:00
Jelmer Vernooij
27eefbd905 r9805: Add 'data' property to param EJS object
Write out new smb.conf file. Parameters that have disappeared
between Samba 3 and 4 will optionally be prefixed with 'samba3:'
2007-10-10 13:35:03 -05:00
Jelmer Vernooij
bb0cef581a r9800: Add EJS interface to param. tridge, sorry this overlaps a bit
with your loadparm interface. :-/
2007-10-10 13:35:03 -05:00
Jelmer Vernooij
414e5f7f6d r9798: Add generic functions for handling smb.conf files (the parameters don't to be pre-declared). Also doesn't use any globals, so multiple files can be loaded at once.
Currently uses the prefix "param" for all functions and structures; suggestions for better ones are welcome...

Remove old smb.conf-parsing code from libsamba3.
2007-10-10 13:35:02 -05:00
Jelmer Vernooij
7f864d446d r9685: Add tests for samba3sam mapping module
Fix a couple of bugs
Move samba3sam backend to lib/ldb/
Remove some more unused parameters
2007-10-10 13:34:41 -05:00
Jelmer Vernooij
4a51a31571 r9684: Remove unused parameters (about 70) 2007-10-10 13:34:40 -05:00
Jelmer Vernooij
84b2fb3467 r9602: Add support for reading share_info.tdb and smb.conf.
Add userdata argument to function pointers for pm_process()
2007-10-10 13:34:33 -05:00
Tim Potter
feb341969e r9382: Add a dummy registry for HKEY_USERS to get rid of the annoying dialog
presented by regedt32.  I think this hive is dynamically generated
from SAM information.
2007-10-10 13:33:30 -05:00
Andrew Tridgell
8db549b150 r9119: added a lp.categories() call in the loadparm js object, to allow
retrieval of the smb.conf parameter categories. This will make writing
a smb.conf editor easier.
2007-10-10 13:31:18 -05:00
Andrew Tridgell
c2691ef712 r8643: - make lp_configfile() work again
- get rid of redundeny dyn_CONFIGFILE argument to lp_load()

- fixed provisioning to work with completely pristine install,
  creating an initial smb.conf is none is present

- added lp.set() and lp.reload() to loadparm ejs object interface
2007-10-10 13:29:48 -05:00
Love Hörnquist Åstrand
56fd21c806 r8394: Make sure the argument to ctype is*(3) macros are unsigned char as
required by ISO C99.
2007-10-10 13:20:14 -05:00
Andrew Tridgell
c842144cbf r8344: added a "setup directory" smb.conf parameter, pointing at the setup template files 2007-10-10 13:20:09 -05:00
Andrew Tridgell
ff60529ba2 r8297: add libinclude() function in ejs, which is like include() but searches a js library
path set in "js include" in smb.conf.

This will allow us to start building up a library of common js code,
while avoiding the problem of hard-coding include paths in scripts
2007-10-10 13:19:32 -05:00
Andrew Tridgell
b220756cb4 r8273: fixed some memory leaks in smbscript. This required converting
file_load() to use talloc, which impacted quite a few bits of code,
including our smb.conf processing.

took the opportunity to remove the gloabls in params.c while doing this
2007-10-10 13:19:29 -05:00
Andrew Bartlett
3d82b1417b r7966: We need a better way to do this, but enable the KDC by default, if we
have kerberos.

Andrew Bartlett
2007-10-10 13:18:54 -05:00
Andrew Tridgell
8c17b61f8e r7916: - got rid of the in_client global
- make not finding smb.conf a level 1 message, not level 0. Most of our
  tools handle no smb.conf, and those that don't should check for the
  specific parameters they need, or use the defaults
2007-10-10 13:18:49 -05:00
Andrew Tridgell
c5bccbc366 r7912: make private_path() recognise a non-relative filename, so we can have
sam database = sam.ldb

and it will know to put it in the private dir, but if you use

  sam database = ldap://server

it knows to use it as-is
2007-10-10 13:18:48 -05:00
Andrew Tridgell
ce6257b316 r7793: allow integers in smb.conf to be specified in octal or hex 2007-10-10 13:18:36 -05:00
Andrew Bartlett
3f35cdb218 r7757: Add NTLMv2 support to the NT1 Session setup (ie, not SPNEGO/NTLMSSP)
Session Setup code.

Add a mem_ctx argument to a few of the NTLMv2 support functions, and
add smb.conf options to control client NTLMv2 behaviour.

Andrew Bartlett
2007-10-10 13:18:32 -05:00
Andrew Tridgell
023fc567ba r7744: converted the web server to use the lib/tls/ generic tls code 2007-10-10 13:18:30 -05:00
Stefan Metzmacher
455b5536d4 r7643: This patch adds a new NTPTR subsystem:
- this is an abstraction layer for print services,
  like out NTVFS subsystem for file services

- all protocol specific details are still in rpc_server/spoolss/
  - like the stupid in and out Buffer handling
  - checking of the r->in.server_name
  - ...

- this subsystem can have multiple implementation
  selected by the "ntptr providor" global-section parameter

- I currently added a "simple_ldb" backend,
  that stores Printers, Forms, Ports, Monitors, ...
  in the spoolss.db, and does no real printing
  this backend is basicly for testing, how the spoolss protocol
  works

- the interface is just a prototype and will be changed a bit
  the next days or weeks, till the simple_ldb backend can
  handle all calls that are used by normal w2k3/xp clients

- I'll also make the api async, as the ntvfs api
  this will make things like the RemoteFindFirstPrinterChangeNotifyEx(),
  that opens a connection back to the client, easier to implement,
  as we should not block the whole smbd for that

- the idea is to later implement a "unix" backend
  that works like the current samba3 code

- and maybe some embedded print server vendors can write there own
  backend that can directly talk to a printer without having cups or something like this

- the default settings are (it currently makes no sense to change them :-):

ntptr providor = simple_ldb
spoolss database = $private_dir/spoolss.db

metze
2007-10-10 13:18:16 -05:00
Andrew Bartlett
9e6112eee3 r7531: Finally fix lp_load(). I had left hooks in place which restricted us
to globals only (no shares).

Andrew Bartlett
2007-10-10 13:18:07 -05:00
Andrew Bartlett
990e061939 r7530: Simply calling convention of lp_load().
This always loads all the services, as we now don't have an easy way
to split out smbd.

Andrew Bartlett
2007-10-10 13:18:07 -05:00
Andrew Bartlett
51ba3ea60c r7221: Add the start of a KDC service (to be built on a 'libkdc' from a to be
included Heimdal) to Samba4.

Andrew Bartlett
2007-10-10 13:17:27 -05:00
Andrew Tridgell
bbafdeae3a r7016: - added smb.conf parm 'web tls = true/false'
- by default enable tls if the certfile is set in smb.conf and gnutls library
  was compiled in
2007-10-10 13:17:06 -05:00
Andrew Tridgell
abfa3e9179 r7012: added smb.conf parameters
web tls keyfile
  web tls certfile
  web tls cafile
  web tls crlfile
2007-10-10 13:17:06 -05:00
Andrew Tridgell
592a81c347 r7008: - split out the loadparm type definitions so loadparm internals can be accessed externally
- moved esp_lpGet() to web_server/calls.c

- attempt to fixup ejs build with includes.h again
2007-10-10 13:17:05 -05:00
Andrew Tridgell
5537a0d38d r7002: added support for getting at loadparm config parameters via lpGet() in esp scripts
lpGet takes 4 forms
    v = lpGet("type:parm");             gets a parametric variable
    v = lpGet("share", "type:parm");    gets a parametric variable on a share
    v = lpGet("parm");                  gets a global variable
    v = lpGet("share", "parm");         gets a share variable

in all cases a ejs object of the appropriate type for the variable is returned.

This commit also adds the function typeof() which returns the type of an object
2007-10-10 13:17:04 -05:00
Andrew Tridgell
31543e1eae r6982: install the swat pages with 'make installswat' 2007-10-10 13:17:02 -05:00
Andrew Tridgell
26f0ba92c0 r6981: first version of the builtin web server for Samba4
This includes an embedded server side scripting system called 'esp'
(see http://www.appwebserver.org/products/esp/esp.html) and javascript
based scripting language called 'esj' (see
http://www.appwebserver.org/products/ejs/ejs.html)

The justification for including this scripting language is that it
should make it much easier to write a high quality web interface for
Samba4. The scripting language can call into any Samba4 library code
(so for example it will be able to make ldb and loadparm calls), plus
it provides easy support for forms, cookies, sessions etc.

There is still quite a bit more work to do on the web server, but
there is enough here now for people to look at and comment. I will be
committing some sample web pages that test esp functionality shortly.
2007-10-10 13:17:01 -05:00
Andrew Bartlett
9f895f6482 r6902: Turn the LDAP server on by default. It is no worse than the others...
(no ACL support)

Andrew Bartlett
2007-10-10 13:16:56 -05:00