summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-10-11vfs: Use a blocking function in vfs_zfsacl for system ACL blobsAndrew Bartlett1-0/+12
This is so we do not query some other module for the ACL blob, as zfs ACLs are not posix ACLs. We may add a linearisation later. Andrew Bartlett
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_tru64acl for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_solarisacl for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_posixacl for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_irix for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_hpux for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_gpfs for posix ACLsAndrew Bartlett1-0/+58
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_fake_acls for posix ACLsAndrew Bartlett1-67/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_default for posix ACLsAndrew Bartlett1-0/+2
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_aixacl2 for posix ACLsAndrew Bartlett1-0/+38
2012-10-11vfs: Use posix_sys_acl_blob_get_file in vfs_aixaclAndrew Bartlett1-0/+2
2012-10-11vfs: Use a blocking function in vfs_afsacl for system ACL blobsAndrew Bartlett1-1/+17
This is important, as we need to avoid asking any lower module for a possible libear ACL blob. We may implement a linearisation in the future. Andrew Bartlett
2012-10-11vfs: Implement a sys_acl_blob_get_{fd,file} for POSIX ACL backendsAndrew Bartlett3-1/+126
This simply linearlises the SMB_ACL_T (default and access acl for directories) and the file owner, group and mode into a blob. It will be useful for an improved vfs_acl_common.c that uses this sets that, rather than the hash of the NT ACL, in the xattr This will in turn insulate the stored hash from changes in the ACL mapping. Andrew Bartlett
2012-10-11vfs: Remove type parameter from sys_acl_blob_get_{fd,file}Andrew Bartlett7-17/+16
This interface actually needs to match the get_nt_acl interface in that the system ACL implmenetation may not be posix ACLs, and the blob is not meant to be enforced to be of a particular system ACL structure. Andrew Bartlett
2012-10-11smbd: Add mem_ctx to {f,}get_nt_acl VFS callAndrew Bartlett25-130/+245
This makes it clear which context the returned SD is allocated on, as a number of callers do not want it on talloc_tos(). As the ACL transformation allocates and then no longer needs a great deal of memory, a talloc_stackframe() call is used to contain the memory that is not returned further up the stack. Andrew Bartlett
2012-10-11smbd: Add mem_ctx to sys_acl_init() and all callersAndrew Bartlett27-146/+219
This changes from allocation on NULL to allocation on the supplied memory context. Currently that supplied context is talloc_tos() at the the final consumer of the ACL. Andrew Bartlett
2012-10-11build: Add vfs_media_harmony to the waf buildAndrew Bartlett1-0/+9
2012-10-11posixacls: Add IDL changes for vfs_acl_xattr using hash of the sys aclAndrew Bartlett2-1/+32
This will isolate the hash of the ACL from any intermediate mapping that the POSIX -> NT mapping subsystem might need to do, and which might change if we need to correct that mapping. Andrew Bartlett
2012-10-10s3-rpc_server: fix build warningDavid Disseldorp1-0/+2
enum dcerpc_transport_t is undeclared, include required headers. Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Wed Oct 10 12:41:28 CEST 2012 on sn-devel-104
2012-10-09Make sure the returned sd is on the right context, and if not it's always freed.Jeremy Allison1-1/+3
Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Oct 9 23:35:50 CEST 2012 on sn-devel-104
2012-10-09Move setting of psd->dacl->revision and protect against null SD's.Jeremy Allison1-2/+4
2012-10-09docs: Add '-V' to the list of options.Karolin Seeger1-1/+1
Karolin Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Tue Oct 9 18:53:12 CEST 2012 on sn-devel-104
2012-10-09samba-tool: Some more unifications...Karolin Seeger15-15/+15
in the usage message. Karolin
2012-10-09packaging: Add config for systemd-tmpfiles.Andreas Schneider2-0/+15
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Oct 9 17:10:53 CEST 2012 on sn-devel-104
2012-10-09samba-tool: skip chown in sysvolreset when it would fail on a GIDAndrew Bartlett2-13/+48
This skips the chown of the files if (for example) the domain Admins group were to own the file and not be able to because the group maps only to a GID. This essentially papers over the problem, but may be enough to get us past the Samba 4.0 release. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Oct 9 15:24:44 CEST 2012 on sn-devel-104
2012-10-09s3: Pass down smb_filename to smbacl4_fill_ace4Volker Lendecke1-6/+6
A full fsp is a bit overkill here Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Tue Oct 9 13:38:49 CEST 2012 on sn-devel-104
2012-10-09s4-rpc: dnsserver: Ignore DNS zones that are not used by RPC dnsserverAmitay Isaacs1-0/+4
..TrustAnchors zone is not interpreted by RPC dnsserver code. Signed-off-by: Amitay Isaacs <amitay@gmail.com> Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Tue Oct 9 03:21:07 CEST 2012 on sn-devel-104
2012-10-09s4-dns: dlz_bind9: Ignore zones that are not used by BIND9 DLZ pluginAmitay Isaacs1-0/+5
Signed-off-by: Amitay Isaacs <amitay@gmail.com>
2012-10-08s4:scripting/python: add '-V' as alias for '--version'Stefan Metzmacher1-1/+1
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Mon Oct 8 17:52:52 CEST 2012 on sn-devel-104
2012-10-08s4:samba-tool: allow 'samba-tool --version'Stefan Metzmacher1-0/+6
metze
2012-10-08s4:samba-tool: use normal option parsing in SuperCommandStefan Metzmacher1-10/+13
We use the epilog to print the subcommands. metze
2012-10-08s4:samba-tool: add optional epilog to _create_parser()Stefan Metzmacher1-2/+7
metze
2012-10-08s3fs-printing: Fix RAW printing for normal users.Andreas Schneider1-1/+1
This fixes bug #8769. Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Mon Oct 8 16:11:51 CEST 2012 on sn-devel-104
2012-10-08samba-tool: Unify usage messages.Karolin Seeger13-60/+60
Karolin Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Mon Oct 8 14:26:52 CEST 2012 on sn-devel-104
2012-10-08docs: Add man 8 samba-tool.Karolin Seeger1-0/+613
Addresses bug #8802 - Create missing manpages for new binaries. Please note that it's a very basic version. Please feel free to extend. Karolin
2012-10-08samba-tool: Clarify usage of --help.Karolin Seeger1-1/+1
Karolin
2012-10-08docs: fix opening and ending tag mismatch: paraBjörn Baumbach1-4/+4
in forcedirectorysecuritymode.xml.
2012-10-08docs: fix opening and ending tag mismatch: paraBjörn Baumbach1-4/+4
in directorysecuritymask.xml.
2012-10-08samba-tool: Fix typo in usage.Karolin Seeger1-1/+1
Karolin
2012-10-08s4-dns: fix a warningMatthieu Patou1-2/+1
Autobuild-User(master): Matthieu Patou <mat@samba.org> Autobuild-Date(master): Mon Oct 8 10:45:41 CEST 2012 on sn-devel-104
2012-10-07s4-dns: Ignore zones that shouldn't be returned currentlyMatthieu Patou1-1/+7
RootDNSServers should never be returned (Windows DNS server don't) ..TrustAnchors should never be returned as is, (Windows returns TrustAnchors) and for the moment we don't support DNSSEC so we'd better not return this zone.
2012-10-07s4-join: factorize code, add infoMatthieu Patou1-5/+9
2012-10-07s4-join: add some documentationMatthieu Patou1-1/+11
2012-10-07s4-repl: make dreplsrv_partition_find_for_nc return BAD_NC onlyMatthieu Patou1-2/+7
2012-10-07drsuapi: Validate the input parameters for the drsuapi_UpdateRefs functionMatthieu Patou1-0/+16
2012-10-07drsuapi: check more carefully the validity of the NCMatthieu Patou1-4/+11
Check that both the GUID and DN are the GUID/DN of a NC if not return WERR_DS_DRA_BAD_NC
2012-10-07drsuapi-idl: Fix the encoding of the source_dsa_dnsMatthieu Patou1-1/+1
astring is not aligned and is not conformant
2012-10-07drs-replica-info: level_not_supported is wrong when we do support (partialy ↵Matthieu Patou1-9/+13
the level)
2012-10-07lib-addns: ensure that allocated buffer are pre set to 0Matthieu Patou1-12/+12
It avoid bugs when one of the buffer is supposed to contain a string that is not null terminated (ie. label->label) and that we don't force the last byte to 0.
2012-10-07ldap-server: sscanf result was never used to mistyped varMatthieu Patou1-2/+1