Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-27 | s3-waf: add missing IDMAP modules. | Günther Deschner | 2 | -1/+18 | |
Guenther | |||||
2010-09-27 | s3-waf: rework CLDAP and LIBCLI_LDAP subsystems. | Günther Deschner | 2 | -9/+18 | |
Guenther | |||||
2010-09-27 | s3-waf: move gpext subsystem to libgpo/gpext/wscript_build. | Günther Deschner | 2 | -35/+36 | |
Guenther | |||||
2010-09-27 | s3-waf: move perfcount subsystem to modules/wscript_build. | Günther Deschner | 2 | -23/+23 | |
Guenther | |||||
2010-09-27 | s3-waf: move charset subsystem to modules/wscript_build. | Günther Deschner | 2 | -41/+43 | |
Guenther | |||||
2010-09-27 | s3-waf: move idmap subsystem to winbindd/wscript_build. | Günther Deschner | 2 | -77/+77 | |
Guenther | |||||
2010-09-27 | s3-waf: move pdb subsystem to pdb/wscript_build. | Günther Deschner | 2 | -50/+51 | |
Guenther | |||||
2010-09-27 | s3-waf: move auth subsystem to auth/wscript_build. | Günther Deschner | 2 | -83/+85 | |
Guenther | |||||
2010-09-27 | s3-waf: support --with-acl-support, at least for posix acls. | Günther Deschner | 2 | -22/+55 | |
Guenther | |||||
2010-09-27 | s3-waf: move VFS subsystem to modules/wscript_build. | Günther Deschner | 2 | -389/+403 | |
Guenther | |||||
2010-09-27 | s3-waf: add some module specific functions for s3 waf build. | Günther Deschner | 2 | -0/+23 | |
Thanks to Kai. Guenther | |||||
2010-09-27 | s3-waf: convert VFS into a subsystem. | Günther Deschner | 1 | -0/+340 | |
Guenther | |||||
2010-09-27 | s3-waf: convert GPEXT into a subsystem. | Günther Deschner | 1 | -0/+27 | |
Guenther | |||||
2010-09-27 | s3-waf: convert PERFCOUNT into a subsystem. | Günther Deschner | 1 | -0/+20 | |
Guenther | |||||
2010-09-27 | s3-waf: convert CHARSET into a subsystem. | Günther Deschner | 1 | -0/+34 | |
Guenther | |||||
2010-09-27 | s3-waf: convert IDMAP into subsystem. | Günther Deschner | 1 | -0/+55 | |
Guenther | |||||
2010-09-27 | s3-waf: convert PDB into subsystem. | Günther Deschner | 1 | -0/+41 | |
Guenther | |||||
2010-09-27 | s3-waf: convert AUTH into subsystem. | Günther Deschner | 1 | -0/+59 | |
Guenther | |||||
2010-09-26 | s4-ldbmodules: Added new module aclread to handle access checks on LDAP search | Nadezhda Ivanova | 4 | -0/+327 | |
It is currently enabled only if the request comes from the LDAP server, and is disabled by default. Use acl:search=true in smb.conf to enable it. It filters out all objects the user is not allowed to see, and all attributes the user does not have RP on. Extended access not supported yet. | |||||
2010-09-26 | s4-tests: Added tests for search checks on attributes | Nadezhda Ivanova | 2 | -5/+102 | |
The ACL reach tests are in the knowfail because aclread module is not enabled by default | |||||
2010-09-26 | s4-tests: Removed search tests with anonymous credentials as they fail ↵ | Nadezhda Ivanova | 2 | -4/+4 | |
againts Windows These tests will fail in make test as well if the acl_read module is enabled. | |||||
2010-09-26 | s4-dsdb: Added a function to check access on a particular object by its guid | Nadezhda Ivanova | 1 | -0/+37 | |
Similar to dsdb_check_access_on_dn, only it searches by guid. | |||||
2010-09-26 | s4-dsdb: A helper to determine if an attribute is part of the search filter | Nadezhda Ivanova | 1 | -0/+46 | |
2010-09-26 | s4-dsdb: Moved some helper functions to a separate file | Nadezhda Ivanova | 5 | -222/+260 | |
We need these to be accessible to the aclread module as well. | |||||
2010-09-26 | s4-ldap: Added a control to apply the access checks on read via LDAP | Nadezhda Ivanova | 3 | -0/+6 | |
2010-09-26 | autobuild: use killbysubdir if available | Andrew Tridgell | 1 | -2/+4 | |
this will reduce the spurious test output while processes are being killed | |||||
2010-09-26 | autobuild: exit immediately if no changes from master | Andrew Tridgell | 1 | -1/+9 | |
we don't need to test master in autobuild | |||||
2010-09-26 | s3-waf: convert LIBGPO into a subsystem. | Günther Deschner | 1 | -2/+5 | |
Guenther | |||||
2010-09-26 | s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems. | Günther Deschner | 1 | -11/+19 | |
Guenther | |||||
2010-09-26 | s3-vfs: fix the build of nfs4_acls.c | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2010-09-26 | s3-waf: Link smbd against RPCECHO. | Andreas Schneider | 1 | -1/+1 | |
2010-09-26 | s3: Remove talloc_autofree_context() from nametouid() | Volker Lendecke | 1 | -1/+1 | |
pass is freed a few lines down | |||||
2010-09-26 | s3: Remove talloc_autofree_context() from guest_user_info() | Volker Lendecke | 1 | -1/+2 | |
pwd is freed a few lines down | |||||
2010-09-26 | s3: Remove talloc_autofree_context() from getpwnam_alloc() | Volker Lendecke | 1 | -1/+1 | |
This is given to the memcache a few lines down | |||||
2010-09-26 | s3: Remove talloc_autofree_context() from notify_internal_parent_init() | Volker Lendecke | 3 | -6/+5 | |
2010-09-26 | Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request. | Jeremy Allison | 6 | -57/+134 | |
Found by the CodeNomicon test suites at the SNIA plugfest. http://www.codenomicon.com/ If an invalid NetBIOS session request is received the code in name_len() in libsmb/nmblib.c can hit an assert. Re-write name_len() and name_extract() to use "buf/len" pairs and always limit reads. Jeremy. | |||||
2010-09-26 | s4:schannel: handle move flag combinations in the server | Stefan Metzmacher | 1 | -13/+23 | |
This fixes some testsuites in the CIFS plugfest. metze | |||||
2010-09-26 | s4-auth: fixed the SID list for DCs in the PAC | Andrew Tridgell | 4 | -29/+16 | |
the S-1-5-9 SID is added in the PAC by the KDC, not on the server that receives the PAC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Sep 26 07:09:08 UTC 2010 on sn-devel-104 | |||||
2010-09-26 | autobuild: fixed detection of master changes | Andrew Tridgell | 1 | -3/+4 | |
2010-09-26 | s3-selftest: added samba3.posix_s3.rap.printing as a knownfail | Andrew Tridgell | 1 | -0/+1 | |
this fails intermittently on sn-devel, Günther suggests adding this to knownfail for now | |||||
2010-09-26 | idl-pac: add a decoder for the pac info ctr | Andrew Tridgell | 1 | -0/+4 | |
Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-26 | s4-drs: use the system sam_ctx for updaterefs | Andrew Tridgell | 1 | -8/+9 | |
this is needed for RODC clients calling updaterefs | |||||
2010-09-26 | s4-spn: don't try to do SPN updates as a RODC | Andrew Tridgell | 1 | -0/+4 | |
we don't have the permissions to do it | |||||
2010-09-26 | libcli/ldap: let ldap_full_packet() use asn1_peek_tag_needed_size() | Stefan Metzmacher | 1 | -1/+1 | |
This allows us to read a full packet without read byte after byte or possible read to much. metze | |||||
2010-09-26 | lib/util/asn1: add asn1_peek_tag_needed_size() and asn1_peek_full_tag() | Stefan Metzmacher | 2 | -0/+85 | |
We need a way to ask for the length of a tag without having the full buffer yet. metze | |||||
2010-09-26 | libcli/util: let tstream_read_pdu_blob_* cope with variable length headers | Stefan Metzmacher | 1 | -5/+13 | |
metze | |||||
2010-09-26 | s4-kerberos Don't segfault if the password isn't specified in keytab generation | Andrew Bartlett | 1 | -0/+7 | |
Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun Sep 26 03:29:34 UTC 2010 on sn-devel-104 | |||||
2010-09-26 | upgradeprovision: fix a typo | Matthieu Patou | 1 | -1/+1 | |
2010-09-26 | upgradeprovision: Fix a bug with renamed entries | Matthieu Patou | 1 | -2/+13 | |
The SD was not refetched for renamed entries, resulting with a try to add an additional SD when there was already one. | |||||
2010-09-26 | upgradeprovision: fix a bug with not updated links | Matthieu Patou | 1 | -0/+1 | |