1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Commit Graph

21992 Commits

Author SHA1 Message Date
Günther Deschner
fa2756c944 r22461: Use ranged LDAP queries in lookup_usergroups_member() and start to optinmize
lookup_groupmem(). In the later, at least try to avoid those massive LDAP
dn_lookups by looking in the cache before.

Guenther
(This used to be commit eb1566869c)
2007-10-10 12:19:35 -05:00
Günther Deschner
56f6336fd4 r22460: Adding a generic ads_ranged_search() function.
Guenther
(This used to be commit b8828ea251)
2007-10-10 12:19:35 -05:00
Günther Deschner
8040fec0ac r22459: Adding ads_get_dn_from_extended_dn(), in preparation of making ranged LDAP
queries more generic. Michael, feel free to overwrite these and the following.

Guenther
(This used to be commit 0475b8eea9)
2007-10-10 12:19:35 -05:00
Volker Lendecke
2541e0d590 r22458: Fix a comment
(This used to be commit f5ccec4228)
2007-10-10 12:19:34 -05:00
Gerald Carter
da158ad6a2 r22447: Patch from Ying Li <ying.li2@hp.com> to default tdb idmap
plugin when neither idmap domains nor idmap backend have
been defined.
(This used to be commit 2fa12753da)
2007-10-10 12:19:34 -05:00
Gerald Carter
026852b47a r22444: * Validate a SID before trying to convert it to a uid/gid via the public
winbindd interface

* Add nss_info/*so files to the RHEL/Fedora packaging
(This used to be commit 1787fcb8c1)
2007-10-10 12:19:34 -05:00
James Peach
821bf2bd72 r22441: Add automatic dependency tracking. The dependency generation is
toolchain independent, but since there's no portable method for
doing makefile includes, we can actually use the dependencies with
GNU make. It's easy to add this for other makes, but I don't have
any to test.

This also moves as much m4 as possible into the m4 directory where
no-one has to look at it. AFAICT, there's no way to hide depcomp
in there too, which is unfortunate.
(This used to be commit aa14900f82)
2007-10-10 12:19:34 -05:00
Gerald Carter
d27d6e822e r22430: Add SID validate to sid2uid() and sid2gid() public entry points in winbindd
(This used to be commit 0890cb941e)
2007-10-10 12:19:34 -05:00
Simo Sorce
b304cabb44 r22425: Avoid to segfault if we only have the realm.
(This used to be commit ace1520270)
2007-10-10 12:19:34 -05:00
James Peach
8297933142 r22419: Update configure so that we only need one copy of os2_delete.c
(This used to be commit e5dd3bbf29)
2007-10-10 12:19:34 -05:00
James Peach
44f5211c17 r22418: Support running under launchd. We abstract the method of obtaining
sockets to listen on a little, because in the launchd case these
are provided for us. We also add an idle timeout so that a daemon
can exit after a period of inactivity.
(This used to be commit fc8589a337)
2007-10-10 12:19:33 -05:00
James Peach
8a22b1f0ea r22417: Refactor the various daemon run-mode options to make the semantics
of the various flags explicit.
(This used to be commit 19c929c633)
2007-10-10 12:19:33 -05:00
James Peach
41824de773 r22416: Remove precompiled headers on clean.
(This used to be commit 250028ef03)
2007-10-10 12:19:33 -05:00
James Peach
772ffe76fe r22413: Simplify the build rules for plugin modules. Add support for per-platform
exports files. Fix the shared library build pf pdb_ldap.
(This used to be commit b04dee02d1)
2007-10-10 12:19:32 -05:00
Michael Adam
956a5ce7d5 r22412: Add a "deletelocalgroup" subcommand to net sam.
Thanks to Karolin Seeger <ks@sernet.de>.
(This used to be commit 1499c50513)
2007-10-10 12:19:32 -05:00
Michael Adam
e95c34dc6b r22411: Fix the build:
Prototype of create_aio_ex_read, set_message and definition of
UNIXERROR have changed in r22389 and r22391? to require an additional
"inbuf" argument. Some places in smbd/aio.c had not been adapted.

This patch fixes the build.

Michael
(This used to be commit 9de1af6dc8)
2007-10-10 12:19:32 -05:00
Günther Deschner
04a70aaf1c r22402: Fix build warning.
Guenther
(This used to be commit bf9131fed3)
2007-10-10 12:19:32 -05:00
Michael Adam
90ad4eae89 r22401: Add bzr revision+nick support to mkversion.sh.
The plan is to actually synchronize with SAMBA_4_0's mkversion.sh,
which is more elaborate. But there are a few differences in
behaviour I still have to check. So I am cheching this here in for
a start...

Michael
(This used to be commit dec7e31f29)
2007-10-10 12:19:32 -05:00
Herb Lewis
80576572cc r22395: allow profiling level to be set on startup
(This used to be commit f8f51e8648)
2007-10-10 12:19:32 -05:00
James Peach
cd449e610c r22394: Remove test directory once we are finished.
(This used to be commit e718606295)
2007-10-10 12:19:31 -05:00
Simo Sorce
2d8fbef151 r22393: fix cut&paste error
(This used to be commit 70878d6985)
2007-10-10 12:19:31 -05:00
Simo Sorce
39888067e3 r22392: Remove leftover potentially segfaulty code.
Check we are online before actually trying to connect anywhere
(This used to be commit ff5e0b2986)
2007-10-10 12:19:30 -05:00
Jeremy Allison
0829e1ad1c r22391: Looks bigger than it is. Make "inbuf" available
to all callers of smb_setlen (via set_message()
calls). This will allow the server to reflect back
the correct encryption context.
Jeremy.
(This used to be commit 2d80a96120)
2007-10-10 12:19:30 -05:00
Gerald Carter
36da6cb584 r22390: Patchset sent to samba-technical to address the winbind
loop when allocating a new id for a SID:

auth_util.patch		Revert create_local_token() to
			the 3.0.24 codebase

idmap_type.patch	Have the caller fillin the
			id_map.xid.type field when
			resolving a SID so that if we allocate
			a new id, we know what type to use

winbindd_api.patch	Remove the WINBINDD_SIDS_TO_XIDS calls
			from the public winbindd interface
			for the 3.0.25 release

idmap_rid.patch		Cleanup the idmap_rid backend to not
			call back into winbindd to resolve
			the SID in order to verify it's type.
(This used to be commit 3b24dae9e7)
2007-10-10 12:19:30 -05:00
Jeremy Allison
dc90cd89a7 r22389: Start preparing for multiple encryption contexts in the
server. Allow server to reflect back to calling client
the encryption context that was sent.
Jeremy.
(This used to be commit b49e90335d)
2007-10-10 12:19:30 -05:00
Simo Sorce
20086f66cc r22388: clearer message, thanks David
(This used to be commit 7961476784)
2007-10-10 12:19:29 -05:00
Günther Deschner
9d29f385ea r22376: Make sure we use krb5 when we identify just an older heimdal lib (0.6.x)
Timur, please check.

Guenther
(This used to be commit f7ae237a7f)
2007-10-10 12:19:29 -05:00
Stefan Metzmacher
3255daa188 r22366: sync lib/talloc/ with samba4
metze
(This used to be commit 7fab12b34a)
2007-10-10 12:19:29 -05:00
Stefan Metzmacher
4c8dc9c11e r22364: sync lib/tdb/ with samba4
there's no code change here...

metze
(This used to be commit 562a9ce019)
2007-10-10 12:19:29 -05:00
Stefan Metzmacher
d6ca327bd5 r22363: merge from samba4:
fix compiler warning

metze
(This used to be commit e9200b4475)
2007-10-10 12:19:29 -05:00
Stefan Metzmacher
f2da00aadc r22362: fix the build on othersystems
metze
(This used to be commit 68a681038c)
2007-10-10 12:19:29 -05:00
Jeremy Allison
5cee3be014 r22358: Use gss error to NTSTATUS mapping function for errors.
Jeremy.
(This used to be commit 11fa0ca9e2)
2007-10-10 12:19:29 -05:00
Jeremy Allison
e8d19d5e1a r22355: Ensure we get good debug messages from gss_XX calls.
Jeremy.
(This used to be commit fe36fc79dd)
2007-10-10 12:19:28 -05:00
Jeremy Allison
f7fc540d84 r22354: Make client select krb5 encrpyt if krb5 already on.
Jeremy.
(This used to be commit 7b89a5de57)
2007-10-10 12:19:28 -05:00
Jeremy Allison
383cc1fa1c r22353: Fix bad #ifdefs.
Jeremy.
(This used to be commit 9173c846b1)
2007-10-10 12:19:28 -05:00
Jeremy Allison
d47868cb5e r22352: Wow - working gss SMB sealing !
Jeremy.
(This used to be commit abcb2a4b07)
2007-10-10 12:19:28 -05:00
Jeremy Allison
226d96337f r22351: Making progress in tests...
Jeremy.
(This used to be commit f1726e04eb)
2007-10-10 12:19:28 -05:00
Jeremy Allison
1adbf4af06 r22350: Add some helpful debug messages.
Jeremy.
(This used to be commit bf2e6bd82d)
2007-10-10 12:19:28 -05:00
Jeremy Allison
c5fb215efb r22349: Fix missing ) in #else path.
Jeremy.
(This used to be commit 0f5680adcf)
2007-10-10 12:19:28 -05:00
Simo Sorce
d7c8710a1d r22348: 3_0 as well
(This used to be commit ad57434faf)
2007-10-10 12:19:28 -05:00
Jeremy Allison
093bcd7df9 r22345: Only use new krb5 OID.
Jeremy.
(This used to be commit 1a46d2dcb9)
2007-10-10 12:19:27 -05:00
Jeremy Allison
8e1b82e7ac r22344: Correctly create sub-struct for GSS encryption.
Jeremy.
(This used to be commit 197c90ec78)
2007-10-10 12:19:27 -05:00
Simo Sorce
01be4914b3 r22343: Commit to 3_0 as well after adapting the patch.
(tdb_delete_bystring instead of tdb_delete is used here)
(This used to be commit ee40cead09)
2007-10-10 12:19:27 -05:00
Michael Adam
256f506c5b r22341: Fix build of examples/VFS: adapt include for new place of tdb...
(This used to be commit e711005828)
2007-10-10 12:19:27 -05:00
Gerald Carter
b066668b74 r22340: Fix another segfault in idmap_ldap.c caused by setting the iterator
LDAPMessage * to NULL on each loop rotation.
(This used to be commit 356dd0dd3a)
2007-10-10 12:19:27 -05:00
Michael Adam
2ed59671ce r22330: For my own convenience (changes discussed some weeks ago with
Jerry, who basically didn't care - now I can commit them myself;-):

- Add a call to mkversion.sh to ensure sane version number even
  from a plain checkout.
- Add a "nodocs" switch to allow for calling make-tarball.sh without
  the need of having samba-docs and using-samba around.
(This used to be commit 1e1d22028a)
2007-10-10 12:19:27 -05:00
Jeremy Allison
9812a7e32e r22327: Finish the gss-spnego part of the seal code. Now
for testing....
Jeremy.
(This used to be commit 1c1f5360b6)
2007-10-10 12:19:27 -05:00
Gerald Carter
8a210af339 r22321: BUG 4509: Makefile fix linking the sfu.so and rfc2307.so
plugins in $libdir/nss_info to idmap/ad.so
(This used to be commit 086316d62e)
2007-10-10 12:19:26 -05:00
Lars Müller
fdfe5301fa r22320: Be more careful and check for the euid instead of the uid.
Thx for the hint James!
(This used to be commit 72be9766a9)
2007-10-10 12:19:26 -05:00
Lars Müller
ffc03ada71 r22318: If we're running as non root we might not be able to dump the core file
to the corepath.

Even the chdir() will fail if the LOGFILEBASE path is set 0700.

If the currrent user doesn't have the permission to create the core file
we end with:
   unable to change to <LOGFILEBASE>
   refusing to dump core

The alternative would be to change the permissions of the directory.
But taht would not ensure core dumps are working out of the box.
(This used to be commit 0814a3acbe)
2007-10-10 12:19:26 -05:00