summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-10-18Tests for 'samba-tool user create' with RFC2307 attributesAlexander Wuerstlein2-8/+139
Check if attributes are correctly set and read from SamDB Test automatic creation of attributes from getpwent (NSS) Check if overriding NSS attributes works getpwent will be skipped if the current UID of the user running the tests has no passwd entry (getpwuid(geteuid())). If a user with the name of the current UID already exists in the directory, the getpwent test will fail. If that should happen, the test would need to be updated to use a nonexistent UID that is visible to the Python 'pwd' module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18Set RFC2307 attributes in samba-tool createAlexander Wuerstlein2-3/+58
Optionally set RFC2307 (NIS Schema) attributes in samba-tool create. Mainly needed for UID mapping to be usable. Not all attributes are set-able, only harmless and non-overlapping ones (uid, uidNumber, gidNumber, loginShell, gecos). Description and homeDirectory should already be set, userPassword seems problematic. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18provision: No longer use the wheel group in new AD DomainsAndrew Bartlett6-31/+29
The issue here is that if we set S-1-5-32-544 (administrators) to a GID only, then users cannot force a mandetory profile to be owned by administrators (which is a requirement). There is no particularly useful reason for us to enforce this matching a system group. Andrew Bartlett
2012-10-17s3:smbd: fix brace placements in validate_my_share_entries() for readabilityMichael Adam1-2/+4
according to coding guidelines Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Oct 17 14:37:58 CEST 2012 on sn-devel-104
2012-10-17s3:smbd: also log the "offline" flag when debugging the dos-modeMichael Adam1-0/+1
Signed-off-by: Michael Adam <obnox@samba.org> Signed-off-by: Jeremy Allison <jra@samba.org>
2012-10-17Removed phpldapadmin inclusion for Samba 4.Ricky Nance3-50/+0
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Oct 17 12:55:44 CEST 2012 on sn-devel-104
2012-10-17dns_server: Try and use the dns-SERVER account if we were configured with itAndrew Bartlett1-14/+47
2012-10-17ccan: check for all the used config.h definesRusty Russell2-0/+37
In particular, not checking for byteswap.h meant we defined duplicates: https://bugzilla.samba.org/show_bug.cgi?id=9286 Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User(master): Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date(master): Wed Oct 17 01:55:14 CEST 2012 on sn-devel-104
2012-10-16libcli/dns: Time out requests after a whileKai Blin1-0/+8
Time out UDP requests after DNS_REQUEST_TIMEOUT seconds. Currently set to 2 seconds. This should fix bug #8878. Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Oct 16 12:58:32 CEST 2012 on sn-devel-104
2012-10-16selftest/knownfail: add samba3.rpc.lsa.privileges.lsa.PrivilegesStefan Metzmacher1-0/+1
This failed more than 20 times in the last few weeks, e.g. https://git.samba.org/autobuild.flakey/2012-10-16-0629/samba3.stdout https://git.samba.org/autobuild.flakey/2012-10-16-0829/samba3.stdout [530/717 in 14m32s] samba3.rpc.lsa.privileges(s3dc) Using seed 1350368974 Testing OpenPolicy Testing OpenPolicy2 Testing CreateAccount Testing Delete Testing DeleteObject Testing EnumAccounts Testing LookupSids Testing LookupNames with 7 names LookupName of sharesec_user was unmapped LookupName of Everyone failed to return a result UNEXPECTED(failure): samba3.rpc.lsa.privileges.lsa.Privileges(s3dc) REASON: _StringException: _StringException: ../source4/torture/rpc/lsa.c:319: r.out.result was STATUS_SOME_UNMAPPED, expected NT_STATUS_OK: LookupNames failed FAILED (1 failures, 0 errors and 0 unexpected successes in 0 testsuites) metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Oct 16 10:43:02 CEST 2012 on sn-devel-104
2012-10-16Revert "provision: Always create DNS user."Stefan Metzmacher1-13/+18
This reverts commit c2d14747d608d406de6410556807d467cd0b85ef. samba_upgradedns handles creates/removed the dns acount. See https://lists.samba.org/archive/samba-technical/2012-October/thread.html#87578 metze
2012-10-13s4-dns: Fix the comments about ignoring zones in internal serverMatthieu Patou1-1/+7
Acked-By: Kai Blin <kai@samba.org> Autobuild-User(master): Kai Blin <kai@samba.org> Autobuild-Date(master): Sat Oct 13 12:37:53 CEST 2012 on sn-devel-104
2012-10-12s3:smb2_getinfo ensure proper error for not yet present quota supportChristian Ambach1-0/+4
non-existing quota support needs to be signaled by NT_STATUS_NOT_SUPPORTED, not NT_STATUS_INVALID_PARAMETER Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Fri Oct 12 13:37:37 CEST 2012 on sn-devel-104
2012-10-12s3:vfs_gpfs re-indent run-away linesChristian Ambach1-4/+10
some lines added by the acl_blob additions were longer than 80 chars
2012-10-12s3:vfs_gpfs fix the buildChristian Ambach1-5/+11
make it compile again after the recent (untested) additions of the acl_blob functions
2012-10-12s3:vfs_gpfs remove a trailing spaceChristian Ambach1-1/+1
2012-10-12s3:vfs_gpfs skip local flock when gpfs sharemodes are disabledChristian Ambach1-2/+5
no sense in calling local flock when clustered sharemodes should be disabled
2012-10-12selftest: Move more tests to common list script.Jelmer Vernooij3-29/+32
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Fri Oct 12 02:06:42 CEST 2012 on sn-devel-104
2012-10-11samba.join: Fix multiple spaces.Jelmer Vernooij1-1/+1
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Thu Oct 11 20:30:43 CEST 2012 on sn-devel-104
2012-10-11selftest: Move some tests to common test script.Jelmer Vernooij2-2/+2
2012-10-11selftests.tests: Remove reference to Samba 4.Jelmer Vernooij1-4/+4
2012-10-11samba.provision.sambadns: Use == to compare strings, not 'is'.Jelmer Vernooij1-1/+1
2012-10-11s3fs-printing: Simplify the comment and location handling.Andreas Schneider1-13/+17
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Thu Oct 11 18:49:15 CEST 2012 on sn-devel-104
2012-10-11packaging: Add support for reloading systemd services.Andreas Schneider4-0/+4
2012-10-11provision: Always create DNS user.Jelmer Vernooij1-18/+13
The DNS user is currently only used by the bind9 plugin. This makes it easier to later on switch between the builtin DNS server and bind backend. In addition, ideally the internal DNS server would use that (separate) user too. Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Thu Oct 11 17:05:40 CEST 2012 on sn-devel-104
2012-10-11wafsamba: Ignore some more symbols when checking for dupes.Jelmer Vernooij1-1/+1
2012-10-11smbd: Always free the talloc_stackframe() before leaving ↵Andrew Bartlett1-0/+3
smbd_do_query_security_desc Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 11 15:20:54 CEST 2012 on sn-devel-104
2012-10-11docs: Add very basic samba manpage.Karolin Seeger1-0/+181
Please feel free to extend. Karolin Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Thu Oct 11 11:40:37 CEST 2012 on sn-devel-104
2012-10-11rpc_server:srvsvc Remove psd variable that was no longer set by ↵Andrew Bartlett1-5/+3
SMB_VFS_FGET_NT_ACL This fixes up an error introduced by c8ade07760ae0ccfdf2d875c9f3027926e62321b. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 11 07:53:36 CEST 2012 on sn-devel-104
2012-10-11build: Remove --disable-sharedAndrew Bartlett2-15/+2
This does not work, and has no known use cases. Remove it so we do not waste time trying to support it. This also removes it for ldb/tdb/ntdb/talloc, but as these are first shared libraries, and then tools on top of those, rpath or (for emergency tools) --nonshared-binary= seems more appropriate. Andrew Bartlett
2012-10-11vfs: Remove irixacl module (all the fucntions in it are unimplemented)Andrew Bartlett7-197/+0
2012-10-11vfs: Fix alternative posix and no-op sys acl implementations to take a mem_ctxAndrew Bartlett4-31/+50
These were missed with the initial conversion to use a talloc context. Andrew Bartlett
2012-10-11vfs: Improve formatting of vfs_fake_aclsAndrew Bartlett1-2/+2
This avoids this bad style being copied into new modules. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 11 05:10:16 CEST 2012 on sn-devel-104
2012-10-11vfs: Improve formatting of vfs_defaultAndrew Bartlett1-23/+23
This avoids this bad style being copied into new modules. Andrew Bartlett
2012-10-11examples: Re-indent and reformat skel VFS modulesAndrew Bartlett2-348/+436
This avoids some of the poor style here from propogating to new VFS modules. Andrew Bartlett
2012-10-11vfs: Use a blocking function in vfs_zfsacl for system ACL blobsAndrew Bartlett1-0/+12
This is so we do not query some other module for the ACL blob, as zfs ACLs are not posix ACLs. We may add a linearisation later. Andrew Bartlett
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_tru64acl for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_solarisacl for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_posixacl for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_irix for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_hpux for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_gpfs for posix ACLsAndrew Bartlett1-0/+58
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_fake_acls for posix ACLsAndrew Bartlett1-67/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_default for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_aixacl2 for posix ACLsAndrew Bartlett1-0/+38
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_aixaclAndrew Bartlett1-0/+2
2012-10-11vfs: Use a blocking function in vfs_afsacl for system ACL blobsAndrew Bartlett1-1/+17
This is important, as we need to avoid asking any lower module for a possible libear ACL blob. We may implement a linearisation in the future. Andrew Bartlett
2012-10-11vfs: Implement a sys_acl_blob_get_{fd,file} for POSIX ACL backendsAndrew Bartlett3-1/+126
This simply linearlises the SMB_ACL_T (default and access acl for directories) and the file owner, group and mode into a blob. It will be useful for an improved vfs_acl_common.c that uses this sets that, rather than the hash of the NT ACL, in the xattr This will in turn insulate the stored hash from changes in the ACL mapping. Andrew Bartlett
2012-10-11vfs: Remove type parameter from sys_acl_blob_get_{fd,file}Andrew Bartlett7-17/+16
This interface actually needs to match the get_nt_acl interface in that the system ACL implmenetation may not be posix ACLs, and the blob is not meant to be enforced to be of a particular system ACL structure. Andrew Bartlett
2012-10-11smbd: Add mem_ctx to {f,}get_nt_acl VFS callAndrew Bartlett25-130/+245
This makes it clear which context the returned SD is allocated on, as a number of callers do not want it on talloc_tos(). As the ACL transformation allocates and then no longer needs a great deal of memory, a talloc_stackframe() call is used to contain the memory that is not returned further up the stack. Andrew Bartlett