1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/source3/modules
Holger Hetterich 2a643ef10c Introduce smb_traffic_analyzer protocol v2.
From Holger:
Make smb_traffic_analyzer differ the protocol versions to enable the development of version 2 of the protocol. To do this, a new parameter "protocol_version" has been introduced, which can be set to "V1", "V2", or nothing. If protocol_version is not set, V1 will be chosen automatically.

Created an enum for identifying VFS functions in the upcoming protocol v2. Converted the existing VFS functions to use the identifier, and set the read/write bool used in protocol v1 accordingly, also ignore any other VFS functions except read/write/pread/pwrite in v1. Added a first new VFS function for mkdir, which I use for testing and implementing both the sender and receiver for v2.
2010-03-16 09:52:08 -04:00
..
charset_macosxfs.c
CP437.c
CP850.c
developer.c
getdate.c s3: Fix a few build warnings 2008-12-15 23:30:49 -08:00
getdate.h
getdate.y s3: Fix a few build warnings 2008-12-15 23:30:49 -08:00
gpfs.c changed debuglevel for two messages in the GPFS module from 0 to 10 they spammed the logs on a test machine and they are just debug messages, so let's move them to the level of the other debug messages in the file 2009-09-28 16:37:28 +02:00
nfs4_acls.c Pass "connection_struct *conn" into functions that currently use "current_user.XXX" 2010-03-15 14:49:11 -07:00
nfs4_acls.h Quieten down a boatload of shadowed variable warnings on Solaris. 2009-02-23 15:03:29 -08:00
onefs_acl.c s3 onefs: Canonicalize the ACL in the correct order 2009-08-26 10:41:55 -07:00
onefs_cbrl.c s3 onefs: Self-contend level2 oplocks on BRL 2009-05-12 17:53:16 -07:00
onefs_config.c s3 onefs: Fix reading over the end of the array, because the incorrect array was being read. 2009-06-15 14:11:39 -07:00
onefs_config.h s3 OneFS: Add parameter to ignore streams 2009-03-03 13:06:16 -08:00
onefs_dir.c s3 onefs: update the onefs module to be compliant with stat_ex 2009-05-28 15:13:53 -07:00
onefs_notify.c s3 onefs: update the onefs module to be compliant with stat_ex 2009-05-28 15:13:53 -07:00
onefs_open.c Fix for bug #7189 - Open txt files with notepad on samba shares creates problem. 2010-03-05 15:13:37 -08:00
onefs_shadow_copy.c s3 OneFS: Add shadow copy module 2009-02-19 21:09:31 -08:00
onefs_shadow_copy.h s3 OneFS: Add shadow copy module 2009-02-19 21:09:31 -08:00
onefs_streams.c s3: Add more helpful debugging to some of the streams code 2009-09-24 10:59:33 -07:00
onefs_system.c s3: Add more helpful debugging to some of the streams code 2009-09-24 10:59:33 -07:00
onefs.h s3 onefs: Fix the onefs modules after the big refactoring 2009-07-24 18:46:07 -07:00
perfcount_onefs.c s3-perfcount: update to use new DLIST macros 2010-02-10 15:41:22 -08:00
perfcount_test.c Fix bad use when freeing linked list. Todd Stecher (Original author) please check ! 2010-02-10 16:23:33 -08:00
README-gpfs-acl.txt
README.nfs4acls.txt
vfs_acl_common.c Missed a couple more uses of conn->server_info->ptok that need to be get_current_nttok(conn) 2010-03-12 14:31:47 -08:00
vfs_acl_tdb.c s3-modules: fix get_acl_blob in the acl_tdb VFS module. 2010-02-18 02:17:50 +01:00
vfs_acl_xattr.c Fix bug #6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object. 2010-01-12 16:04:44 -08:00
vfs_afsacl.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_aio_fork.c s3: Test short reads in the build farm 2009-09-14 07:13:22 +02:00
vfs_aixacl2.c s3:vfs_aixacl2: add missing semicolon 2010-03-02 13:00:19 +01:00
vfs_aixacl_util.c Fix some warnings in the AIX ACL code. 2009-08-12 10:58:00 -07:00
vfs_aixacl.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_audit.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_cacheprime.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_cap.c Fix bug #7034 - vfs_cap causes signal 11 (SIGSEGV) 2010-01-12 21:43:23 -08:00
vfs_catia.c vfs_catia: fix return type warnings 2010-02-09 10:11:29 +01:00
vfs_commit.c vfs_commit: print warning when no fsync support is there 2010-01-06 18:28:16 +01:00
vfs_crossrename.c s3: add vfs_crossrename 2010-03-08 17:17:58 +01:00
vfs_default_quota.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_default.c s3: remove cross-device rename support from vfs_default 2010-03-08 17:17:52 +01:00
vfs_dirsort.c s3-vfs: use TYPESAFE_QSORT() in s3 VFS modules 2010-02-14 18:44:20 +11:00
vfs_expand_msdfs.c s3: Simplify the code a bit: Catch (len==0) early 2010-02-03 12:34:25 -08:00
vfs_extd_audit.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_fake_perms.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_fileid.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_full_audit.c Fix for bug #7189 - Open txt files with notepad on samba shares creates problem. 2010-03-05 15:13:37 -08:00
vfs_gpfs.c s3: Add access_mask to the flock VFS call 2009-10-06 18:52:06 +02:00
vfs_gpfs.h Support getting gpfs birthtime 2009-06-02 18:15:20 +02:00
vfs_hpuxacl.c Last 2 VFS_STAT -> LSTAT fixes I can see in the modules code. 2009-10-16 17:20:40 -07:00
vfs_hpuxacl.h s3: Attempt to fix hpuxacl module 2009-07-29 10:12:23 -07:00
vfs_irixacl.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_irixacl.h Put prototypes of modules/vfs_irixacl.c to new modules/vfs_irixacl.h. 2008-08-14 11:22:49 +02:00
vfs_netatalk.c vfs_netatalk: Segfault if hide files or veto files has no ".AppleDouble" 2010-03-10 16:11:26 -08:00
vfs_notify_fam.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_onefs_shadow_copy.c Fix for bug #7189 - Open txt files with notepad on samba shares creates problem. 2010-03-05 15:13:37 -08:00
vfs_onefs.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_posixacl.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_posixacl.h Put prototypes of modules/vfs_posixacl.c into new modules/vfs_posixacl.h. 2008-08-14 11:22:48 +02:00
vfs_prealloc.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_preopen.c Revert "s3: Make the implicit reference to Protocol in is_in_path() explicit" 2009-11-23 16:35:00 +01:00
vfs_readahead.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_readonly.c Remove the bool admin_user from conn struct. We no longer look at this to make access decisions. 2010-03-15 15:39:41 -07:00
vfs_recycle.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_scannedonly.c Fix bug 7075 - bug in vfs_scannedonly rmdir implementation. 2010-02-04 16:23:32 -08:00
vfs_shadow_copy2.c s3-vfs: use TYPESAFE_QSORT() in s3 VFS modules 2010-02-14 18:44:20 +11:00
vfs_shadow_copy.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_smb_traffic_analyzer.c Introduce smb_traffic_analyzer protocol v2. 2010-03-16 09:52:08 -04:00
vfs_solarisacl.c Cleanup patch after "new VFS" 2009-07-25 13:12:08 -04:00
vfs_solarisacl.h Put prototypes of modules/vfs_solarisacl.c to new modules/vfs_solarisacl.h. 2008-08-14 11:22:48 +02:00
vfs_streams_depot.c s3: Do not talloc in readdir 2009-11-18 23:16:13 +01:00
vfs_streams_xattr.c Add comment explaining about symlink following & posix. 2009-10-16 18:13:06 -07:00
vfs_syncops.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_tru64acl.c Make the smbd VFS typesafe 2009-07-24 11:42:05 -04:00
vfs_tru64acl.h Put prototypes of modules/vfs_tru64acl.c to new modules/vfs_tru64acl.h. 2008-08-14 11:22:48 +02:00
vfs_tsmsm.c Restructure the connect function code to always call 2009-11-30 15:53:04 -08:00
vfs_xattr_tdb.c Fix one missing STAT -> LSTAT with POSIX pathnames in vfs_xattr_tdb.c. Caught by the torture tester. I love unit tests :-). Jeremy. 2009-10-16 16:38:59 -07:00
vfs_zfsacl.c s3: Add a zfsacl:denymissingspecial parameter 2010-01-11 12:14:37 +01:00
weird.c

Configuring NFS4 ACLs in Samba3
===============================
Created: Peter Somogyi, 2006-JUN-06
Last modified: Peter Somogyi, 2006-JUL-20
Revision no.: 4 
-------------------------------


Parameters in smb.conf:
=======================

Each parameter must have a prefix "nfs4:".
Each one affects the behaviour only when _setting_ an acl on a file/dir:

mode = [simple|special]
- simple: don't use OWNER@ and GROUP@ special IDs in ACEs. - default
- special: use OWNER@ and GROUP@ special IDs in ACEs instead of simple user&group ids.
Note: EVERYONE@ is always processed (if found such an ACE).
Note2: special mode will have side effect when _only_ chown is performed. Later this may be worked out.

Use "simple" mode when the share is used mainly by windows users and unix side is not significant. You will loose unix bits in this case.
It's strongly advised setting "store dos attributes = yes" in smb.conf.

chown = [true|false]
- true => enable changing owner and group - default.
- false => disable support for changing owner or group

acedup = [dontcare|reject|ignore|merge]
- dontcare: copy ACEs as they come, don't care with "duplicate" records. Default.
- reject: stop operation, exit acl setter operation with an error
- ignore: don't include the second matching ACE
- merge: OR 2 ace.flag fields and 2 ace.mask fields of the 2 duplicate ACEs into 1 ACE

Two ACEs are considered here "duplicate" when their type and id fields are matching.

Example:

[smbtest]
path = /tests/psomogyi/smbtest
writable = yes
vfs objects = aixacl2
nfs4: mode = special
nfs4: chown = yes
nfs4: acedup = merge

Configuring AIX ACL support
==============================

Binaries: (default install path is [samba]/lib/vfs/)
- aixacl.so: provides AIXC ACL support only, can be compiled and works on all AIX platforms
- aixacl2.so: provides AIXC and JFS2-NFS4 ACL support, can be compiled and works only under AIX 5.3 and newer.
NFS4 acl currently has support only under JFS2 (ext. attr. format must be set to v2).
aixacl2.so always detects support for NFS4 acls and redirects to POSIX ACL handling automatically when NFS4 is not supported for a path.

Adding "vfs objects = aixacl2" to a share should be done only in case when NFS4 is really supported by the filesystem.
(Otherwise you may get performance loss.)

For configuration see also the example above.

General notes
=============

NFS4 handling logic is separated from AIX/jfs2 ACL parsing.

Samba and its VFS modules dosn't reorder ACEs. Windows clients do that (and the smbcacl tool). MSDN also says deny ACEs must come first.
NFS4 ACL's validity is checked by the system API, not by Samba.
NFS4 ACL rights are enforced by the OS or filesystem, not by Samba.

The flag INHERITED_ACE is never set (not required, as doesn't do WinNT/98/me, only since Win2k).
Win2k GUI behaves strangely when detecting inheritance (sometimes it doesn't detect, 
but after adding an ace it shows that - it's some GUI error).

Unknown (unmappable) SIDs are not accepted.

TODOs
=====
- Creator Owner & Group SID handling (same way as posix)
- the 4 generic rights bits support (GENERIC_RIGHT_READ_ACCESS, WRITE, EXEC, ALL)
- chown & no ACL, but we have ONWER@ and GROUP@
- DIALUP, ANONYMOUS, ... builtin SIDs
- audit & alarm support - in theory it's forwarded so it should work, but currently there's no platform which supports them to test
- support for a real NFS4 client (we don't have an accepted API yet)