Garming Sam 24a687642d dfs: always call create_conn_struct with root privileges ...

This fixes a bug in dfs_samba4 identified by Daniel Müller.

create_conn_struct calls SMB_VFS_CONNECT which requires root privileges.
SMB_VFS_CONNECT in turn calls dfs_samba4_connect which connects to samdb.

Calls were made to this function without ever becoming root (notably via setup_dfs_referral)
which resulted in an error and the VFS connect failing. This happens when you have an active
directory domain controller with host msdfs = yes in smb.conf and dfs links in place.

Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Bjoern Baumbach <bb@sernet.de>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Jan 10 20:11:03 CET 2014 on sn-devel-104

2014-01-10 20:11:03 +01:00

..

aio.c

s3-aio: Use correct locking context for SMB2

2013-12-05 18:22:16 -08:00

avahi_register.c

s3-param Remove special case for global_myname(), rename to lp_netbios_name()

2011-06-09 12:40:09 +02:00

blocking.c

smbd: Fix blank line endings

2013-09-11 08:27:10 +02:00

close.c

Rename the profile enums with a SAMBA_ prefix to avoid conflict with system files.

2013-11-22 08:56:38 -08:00

conn_idle.c

Fix bug #9733 - smbcontrol close-share is not working.

2013-03-22 20:10:11 +01:00

conn_msg.c

s3:smbd/conn_msg: use talloc_get_type_abort() as private_data can't be NULL

2011-12-14 12:00:07 +01:00

conn.c

Add uint32_t share_access to vuid_cache_entry.

2013-01-09 15:28:48 +11:00

connection.c

s3:smbd: remove unused claim_connection/yield_connection

2012-10-19 12:15:03 +02:00

dfree.c

s3:smbd: in sys_disk_free(), improve a debug message

2012-09-04 20:39:20 +02:00

dir.c

s3-lib: smbclient shows no error if deleting a directory with del failed

2013-11-14 19:29:00 +01:00

dmapi.c

s3-talloc Change TALLOC_REALLOC_ARRAY() to talloc_realloc()

2011-06-09 12:40:08 +02:00

dnsregister.c

s3: include smbd/smbd.h where needed.

2011-03-30 01:13:08 +02:00

dosmode.c

s3-smbd: support FILE_ATTRIBUTE_COMPRESSED

2013-11-22 08:56:45 -08:00

durable.c

smbd: Remove separate oplock_type parameter from set_file_oplock

2013-10-24 14:22:03 +02:00

error.c

s3-smbd: Avoid starting log lines with the word 'error'

2012-02-16 15:21:11 +11:00

fake_file.c

Add 'bool use_privs' to smbd_calculate_access_mask().

2012-09-15 00:37:49 +02:00

file_access.c

smbd: Convert can_delete_file_in_directory to synthetic_smb_fname

2013-04-17 14:50:01 -07:00

fileio.c

Rename the profile enums with a SAMBA_ prefix to avoid conflict with system files.

2013-11-22 08:56:38 -08:00

filename.c

smbd: change flag name from UCF_CREATING_FILE to UCF_PREP_CREATEFILE

2013-12-09 09:48:48 -08:00

files.c

s3:smbd: use PATH_MAX for the buffer passed to full_path_tos()

2013-12-14 16:24:34 +01:00

globals.c

s3:smbd: move initialization of the smbd_shim from smbd_init_globals() to main()

2012-10-19 12:14:58 +02:00

globals.h

s3:smb2_server: avoid calling set_current_user_info() for each request

2013-11-27 16:31:44 +01:00

ipc.c

s3:smbd: make use of smbXsrv_tcon for smb1

2012-06-25 20:55:06 +02:00

lanman.c

CVE-2013-4408:s3:Ensure LookupNames replies arrays are range checked.

2013-12-09 07:05:46 +01:00

mangle_hash2.c

Fix is_legal_name() to not emit character conversion error messages.

2013-09-11 16:38:43 -07:00

mangle_hash.c

Check error returns from strupper_m() (in all reasonable places).

2012-08-09 12:06:54 -07:00

mangle.c

loadparm: make the source3/ lp_ functions take an explicit TALLOC_CTX *.

2012-07-18 15:07:23 +09:30

message.c

Make sure to set umask() before calling mkstemp().

2013-03-06 01:16:34 +01:00

msdfs.c

dfs: always call create_conn_struct with root privileges

2014-01-10 20:11:03 +01:00

negprot.c

smbd: Fix async echo handler forking (Bug 10086)

2013-08-14 15:54:43 +02:00

notify_inotify.c

Fix memory leak in error code path.

2013-07-18 03:22:37 +02:00

notify_internal.c

smbd: Fix a typo

2013-11-27 14:39:10 +01:00

notify.c

s3:smbd: use PATH_MAX for the buffer passed to full_path_tos()

2013-12-14 16:24:34 +01:00

ntquotas.c

lib/util: Remove dummy wrappers for setpwent/getpwent/endpwent.

2012-03-24 15:23:02 +01:00

nttrans.c

smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open.

2013-12-09 21:02:21 +01:00

open.c

smbd - allow updates on directory write times on open handles.

2013-12-05 08:12:09 +01:00

oplock_irix.c

s3:smbd: s/event_add_fd/tevent_add_fd and s/EVENT_FD_/TEVENT_FD_

2013-02-19 23:48:01 +01:00

oplock_linux.c

Wrap setting leases in become_root()/unbecome_root() to ensure correct delivery of signals.

2013-07-31 17:07:58 -07:00

oplock.c

Rename the profile enums with a SAMBA_ prefix to avoid conflict with system files.

2013-11-22 08:56:38 -08:00

password.c

s3:smbd: pass smbXsrv_session instead of user_struct to session_claim() and session_yield()

2012-10-19 12:14:59 +02:00

perfcount.c

loadparm: make the source3/ lp_ functions take an explicit TALLOC_CTX *.

2012-07-18 15:07:23 +09:30

pipes.c

s3-rpc_server: Pass the server event context to np_open().

2013-10-29 16:27:18 +01:00

posix_acls.c

Fix bug 10196 - RW Deny for a specific user is not overriding RW Allow for a group.

2013-10-24 14:20:04 +02:00

process.c

smbd: Make "num_children" available by smbcontrol

2014-01-06 13:27:05 -07:00

proto.h

smbd: Implement and use full_path_tos

2013-12-14 11:21:32 +01:00

pysmbd.c

pysmbd: Convert py_smbd_unlink to synthetic_smb_fname

2013-04-17 14:50:00 -07:00

quotas.c

quota: move function again to its belonging ifdef block

2012-09-11 04:44:28 +02:00

reply.c

smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open.

2013-12-09 21:02:21 +01:00

scavenger.c

s3:smbd:smb2:scavenger: fix format error for debugging open_persistent_id in scavenger_timer()

2013-04-19 01:36:15 +02:00

scavenger.h

s3:smbd: add a scavenger process for disconnected durable handles

2013-04-18 13:15:13 +02:00

seal.c

libcli/smb: Convert struct smb_trans_enc_state to talloc

2012-01-31 20:17:10 +01:00

sec_ctx.c

Fix bug #9329 - Directory listing with SeBackup can crash smbd.

2012-10-29 16:26:20 +01:00

server_exit.c

Call smb_panic when we try to exit the server uncleanly. This gives us the normal traceback and memory dump, but also runs the normal panic action.

2013-03-27 22:58:36 +01:00

server_reload.c

Fix bug 9900: is_printer_published GUID retrieval

2013-06-03 14:10:07 +02:00

server.c

smbd: Make "num_children" available by smbcontrol

2014-01-06 13:27:05 -07:00

service.c

fileserver: raise the debug level for share connection from non IPC to 2

2013-04-19 12:27:56 -07:00

session.c

s3:smbd/session: Added a routine find_sessions()

2013-09-10 11:32:46 -07:00

sesssetup.c

s3:smbd: keep global_client_caps and max_send from the first successful session setup

2013-03-20 09:32:26 -07:00

share_access.c

s3: Fix some blank line endings

2012-10-20 09:06:12 +02:00

signing.c

lib/param: Consolidate code to enable smb signing on the server, always enable on AD DC

2013-11-22 13:13:03 +01:00

smb2_break.c

smbd: Remove unused reply_to_oplock_break_requests

2013-04-26 15:17:22 -07:00

smb2_close.c

s3:smbd/smb2 fix compiler warnings

2013-12-12 14:21:27 -08:00

smb2_create.c

smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open.

2013-12-09 21:02:21 +01:00

smb2_find.c

s3:smb2_find: Return that timestamps do not exist as directories

2013-09-10 22:38:50 +02:00

smb2_flush.c

s3:smb2_flush: make use of SMBD_SMB2_IN_BODY_PTR()

2012-08-05 20:55:35 +02:00

smb2_getinfo.c

smbd: Revert a93f9c3

2013-08-28 23:37:08 +02:00

smb2_glue.c

Add function smbd_smb2_unread_bytes().

2013-04-19 14:10:51 -07:00

smb2_ioctl_dfs.c

smb2_ioctl: split ioctl handler code on device type

2013-01-16 23:15:06 +01:00

smb2_ioctl_filesys.c

smb2/ioctl: add support for FSCTL_[GET/SET]_COMPRESSION

2013-11-22 08:56:45 -08:00

smb2_ioctl_named_pipe.c

smbd: Fix CID 1035550 Structurally dead code

2013-08-12 17:25:54 +12:00

smb2_ioctl_network_fs.c

smb2_ioctl: add support for FSCTL_SRV_COPYCHUNK_WRITE

2013-10-25 11:41:19 -07:00

smb2_ioctl_private.h

smb2_ioctl: split ioctl handler code on device type

2013-01-16 23:15:06 +01:00

smb2_ioctl.c

smb2_ioctl: remove ioctl error response assumptions

2013-01-16 23:15:07 +01:00

smb2_keepalive.c

s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_keepalive.c

2011-09-07 10:38:06 +02:00

smb2_lock.c

smbd: Fix a panic when a smb2 brlock times out

2013-12-05 21:21:35 +01:00

smb2_negprot.c

s3:smb2_negprot: set the 'remote_proto' value

2013-01-09 09:11:20 +01:00

smb2_notify.c

smbd: Avoid calling notify_filter_string for low debuglevels

2013-12-04 20:09:39 +01:00

smb2_read.c

s3: Return correct error code from SMB2 AIO read failure

2013-12-05 18:22:16 -08:00

smb2_server.c

smbd: Fix CID 1138328 Logically dead code

2013-12-17 01:57:13 +01:00

smb2_sesssetup.c

s3:smbd/smb2 fix compiler warnings

2013-12-12 14:21:27 -08:00

smb2_setinfo.c

Rename set_sd() to set_sd_blob() - this describes what it does.

2012-08-30 10:08:50 -07:00

smb2_tcon.c

s3:smbd: fill tcon->global->session_global_id

2012-10-19 12:15:02 +02:00

smb2_write.c

s3:smbd: remove struct member smbd_smb2_request.cancelled - it was only written

2012-09-22 10:19:00 +02:00

smbd.h

smbd: change flag name from UCF_CREATING_FILE to UCF_PREP_CREATEFILE

2013-12-09 09:48:48 -08:00

smbXsrv_open.c

smbd:smb2: successfully answer a DHnC request when the initial create was DH2Q

2013-10-05 14:04:08 +02:00

smbXsrv_session.c

s3:smbXsrv_session: pass record in smbXsrv_session_global_traverse()

2013-02-19 12:10:21 +01:00

smbXsrv_tcon.c

s3:smbXsrv_tcon: pass record in smbXsrv_tcon_global_traverse()

2013-02-19 12:10:22 +01:00

smbXsrv_version.c

s3:smbd: add smbXsrv_version_* infrastructure

2012-06-25 20:55:05 +02:00

srvstr.c

s3-talloc Change TALLOC_REALLOC_ARRAY() to talloc_realloc()

2011-06-09 12:40:08 +02:00

statcache.c

Second part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.

2011-10-22 04:57:10 +02:00

statvfs.c

s3: evaluate MNT_QUOTA and MNT_RDONLY in statvfs also on darwin

2012-07-05 22:00:52 +02:00

trans2.c

smbd: Fix a false DEBUG fn name

2013-12-14 10:04:37 +01:00

uid.c

s3-smbd_shim: Add become_authenticated_pipe_user().

2013-10-29 15:52:58 +01:00

utmp.c

s3:smbd: use session_global_id as session number for pam and utmp

2012-10-19 12:15:00 +02:00

vfs.c

smbd: Avoid pointless strcsequal calls

2013-12-14 10:11:57 +01:00