Age | Commit message (Collapse) | Author | Files | Lines |
|
depending on encryption context pointer.
Jeremy.
(This used to be commit d3f3ced6c8a03d971143baf878158d671dfcbc3b)
|
|
The idea is that we have blocking.c:brl_timeout as a timed
event that is present whenever we do have a blocking lock
pending. It fires brl_timeout_fn() which calls
process_blocking_lock_queue().
Whenever we make changes to blocking_lock_queue, we trigger
a recalc_brl_timeout() which sets a new brl_timout event if
necessary. This makes the call to
blocking_locks_timeout_ms() in setup_select_timeout()
unnecessary, this is implicitly done in
event_add_to_select_args() from the timed events.
Volker
(This used to be commit 7e31b8ce21de803ac1f8967967393341a3f44ac3)
|
|
decides smbd
to be idle it might happen that smbd needs to do a winbind operation (for
example sid2name) as non-root. This then fails to get the privileged
pipe. When later on on the same connection another authentication request
comes in, we try to do the CRAP auth via the non-privileged pipe.
This adds a winbindd_priv_request_response() request that kills the existing
winbind pipe connection if it's not privileged.
Volker
(This used to be commit e5741e27c4c22702c9f8b07877641fecc7eef39c)
|
|
Jeremy.
(This used to be commit 184571e4b0283fb1a62c441f10429006656052c8)
|
|
for the server side enc. (doesn't break anything).
I'll keep updating this until I've got NTLM seal working
on both client and server, then add in the gss level
seal.
Jeremy.
(This used to be commit 530ac29abf23e920baa549e7cec55199edd8bd74)
|
|
Relax check for i386 header checks in the PE header of printer
driver files. Thus allowing uploading of x64 print drivers
from 64bit Windows clients.
(This used to be commit 328807ec7b1ce6489d5443a93d1599f93af93933)
|
|
for pointing this out !
Jeremy.
(This used to be commit b69e18c7f167418ca364a85f1dac252f7b549e57)
|
|
(This used to be commit e1fbfbe1c49d3ff1ca71a33e66fae1f2d48fb7a7)
|
|
(This used to be commit fcec3d1c46affbf802fb411913c8cc59c02102fa)
|
|
conn_idle_all() a bit.
Volker
(This used to be commit 3fc00977a99932b226bdcbc43bbc0ede1bcec26f)
|
|
idle event.
Volker
(This used to be commit 6226b30f38cd82531422815ba66a687aab50028d)
|
|
On the way, make lp_keepalive() a proper parameter.
Volker
(This used to be commit 9499fd9c803d030ce9827f8379c2e56d91bb786e)
|
|
can be done
with a become_root/unbecome_root in debug.c.
(This used to be commit 4632a0caaf251d9cc7b9d84cbd20362d37f0e4e0)
|
|
referenced in conn_idle_all().
(This used to be commit c0aaee6d36cf1fb873cfb9ab6ee52ff097a202a0)
|
|
(This used to be commit 52f2c89c0a462a69fe945401ac1a7341e2a6e4ca)
|
|
these out as I implement. Don't add to SAMBA_3_0_25, this
is experimental code.
NFSv4 you're now officially on notice... :-).
Jeremy.
(This used to be commit 5bfe638f2172e272741997100ee5ae8ff280494d)
|
|
Jeremy.
(This used to be commit f18e87ba6b6a3f4c16777cb5b6bf93a656800247)
|
|
Jeremy.
(This used to be commit d432d81c8321a4444b970169a5c7c3c5709de8e5)
|
|
get_a_printer_2_default() as well
(This used to be commit 5b47c4e5c25550ad72f9e558bb50f237ba28f81e)
|
|
when fetching a printer from ntprinters.tdb.
Slightly modified from original version submitted on
samba-technical ml by Andy Polyakov <appro@fy.chalmers.se>
(This used to be commit e859e1fdcd13c55746a53b5de4a02a3278f41815)
|
|
* Fix getgroups() call called using a normalized name
* Fix some more name mappings that could cause for example
a user to be unable to unlock the screen as the username
would not match in the PAM authenticate call.
(This used to be commit 505fc669a1b2c36e1639924b9639c97988056d8d)
|
|
Guenther
(This used to be commit 663514e511982437c09d45334b8d435448347ed6)
|
|
Guenther
(This used to be commit f55e1a312e75dc72ea040a35a9c20ccf539c4ae4)
|
|
doesn't
make sense as long as it doesn't work as an lp_unload().
Guenther
(This used to be commit 128ea9bebbb215e41d2f0576e1a73c6a362b7467)
|
|
Guenther
(This used to be commit eb34ebd9e76061417200a286c2831394be04529b)
|
|
(This used to be commit d0d16cc55ab830dcfd4f8c6c7bf64d2b9b6dd55b)
|
|
(This used to be commit ff886436b739bbb5c00a67de970841205a3f447c)
|
|
the MIT gss libraries *SUCK*, move the frees to the end
of the function so MIT doesn't segfault.....
Add a comment so that another engineer knows why I did
this.
Jeremy.
(This used to be commit 1a2be06d4a1131952a97f94b05ae69b1dce4c300)
|
|
principal data
(This used to be commit 54a114fa7569315a8ad391689ebf5d68ef4a62d4)
|
|
in sasl bind. Wonder why coverity didn't find these ?
Jeremy.
(This used to be commit 89bdd30e4b2bb9dbc2ab57c54be8c6d01cae5a26)
|
|
Jeremy.
(This used to be commit 1e32b44bfcf7676b3a9f208054fa853e7066eafc)
|
|
to return a NT_STATUS_TIME_DIFFERENCE_AT_DC error to
a client when there's clock skew. Will help people
debug this. Prepare us for being able to return the
correct sessionsetupX "NT_STATUS_MORE_PROCESSING_REQUIRED"
error with associated krb5 clock skew error to allow
clients to re-sync time with us when we're eventually
able to be a KDC.
Jeremy.
(This used to be commit c426340fc79a6b446033433b8de599130adffe28)
|
|
Thanks to Thomas Jarosch for pointing this out.
(This used to be commit bd9439cc7d80e172feab72229b553028e134de05)
|
|
Volker
(This used to be commit fd0ee6722ddfcb64b5cc9c699375524ae3d8709b)
|
|
added to debug messages
(This used to be commit 4af2795e65f6bab156b300d720c7ea75c944bb87)
|
|
Not used
yet, the next step will be a secrets_fetch_machine_account() function that
also pulls the account name to be used in the appropriate places.
Volker
(This used to be commit f94e5af72e282f70ca5454cdf3aed510b747eb93)
|
|
This is a starting point and may get changed. Basically we need follow the
exact same path to detect (K)DCs like other Samba tools/winbind do. In
particular with regard to the server affinity cache and the site-awarness for
DNS SRV lookups.
To compile just call "make bin/smb_krb5_locator.so", copy to
/usr/lib/plugin/krb5/ (Heimdal HEAD) or /usr/lib/krb5/plugins/libkrb5/ (MIT)
and you should immediately be able to kinit to your AD domain without having
your REALM with kdc or kpasswd directives defined in /etc/krb5.conf at all.
Tested with todays Heimdal HEAD and MIT krb5 1.5.
Guenther
(This used to be commit 34ae610bd5b9fd1210f16beac07a1c5984144ca7)
|
|
transaction. Succeed all or store nothing.
Volker
(This used to be commit 4efc7b45985e807532214959c1872cd6e7865ab8)
|
|
(This used to be commit f88eab91c43570e4da7a4a6cd117e7b7ebf53331)
|
|
(This used to be commit 05bd5cb6eef2f0adacc98fd2c94356006358d3d6)
|
|
Jerry, you might like to consider this for 3.0.25
(This used to be commit 4b1c4cd25aac98ce6a9959e9708f72b0b65e20af)
|
|
binaries again with each make. Thx Volker to point my chesty at this.
(This used to be commit 0cb6634d94f601a96541f882a5486e82084f9413)
|
|
Jeremy.
(This used to be commit b1fa55e513f506bfb58687b692e1507732b00fbc)
|
|
(This used to be commit 8700cd71bb3af3a55f025b34b61062aa5b66b6bc)
|
|
works from smbclient and Windows, and I am promising to
support and fix both client and server code moving forward.
Still need to test the RPC admin support but I haven't
changed that code.
Jeremy.
(This used to be commit 7a7862c01d07796ef206b255c676ad7dc2cc42fc)
|
|
Bad cut-n-paste on rewrite of timestamps.
Jeremy.
(This used to be commit 1809e0866ae135af1d5ea36a8534e1678ee9b27d)
|
|
Volker
(This used to be commit a0af6ff736077725cc7d31d9cdecd024fc7e17a1)
|
|
winbind
who did not run the idle events to drop ldap connections.
Volker
(This used to be commit af3308ce5a21220ff4c510de356dbaa6cf9ff997)
|
|
from POSIX_OPEN and POSIX_MKDIR as specified
by Stevef in the wikki (extra 4 byte field).
Also fix horrible bug in James's code (James
you should review this for your Apple patch
tree) where he failed to allocate the correct
return memory size when returning a INFO2
struct. Added #define for the size of the
INFO2 struct and made sure we allocate the
correct size for return.
Jeremy.
(This used to be commit d88bc59cb4d5e8851b0856c67ed878ba8bd84552)
|
|
(This used to be commit a2dc1f62fdf7683cfb2ca71499dbe7efddc4aa9b)
|