summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-11-17param: calculate server role from security, and security from server roleAndrew Bartlett11-39/+132
This allows smb.conf files from either the samba3 or samba4 tradition to come to the same value of server role, using the information in the smb.conf file. This is important so that tools like 'net getlocalsid' work against a Samba4 AD installation (yes, users have tried this). Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s3-param remove lp_domain_logons(), always use IS_DCAndrew Bartlett6-6/+4
This makes the code internally consistant. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: make server role list common and include auto (for the new default)Andrew Bartlett2-4/+17
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17roles: Add ROLE_AUTO to indicate that the server role is calculatedAmitay Isaacs1-1/+4
2011-11-17s3-param: Add "server role" as global parameterAmitay Isaacs3-10/+31
This will help extracting server role processing code in common library.
2011-11-17param: Add "domain logons" and "domain master" parametersAmitay Isaacs2-0/+22
This makes parsing of config files with s3 loadparm code and s4 loadparm code consistent.
2011-11-16s3-libsmb/passchange.c: remove some cli_nt_error() callsBjörn Baumbach1-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 16 20:36:11 CET 2011 on sn-devel-104
2011-11-16s3-winbindd/winbindd_cm.c: remove cli_nt_error()Björn Baumbach1-8/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-16s3-libsmb/clidfs.c: remove cli_nt_error()Björn Baumbach1-2/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-16s3:winbindd_cm: remove unused ads_statusStefan Metzmacher1-3/+0
metze
2011-11-16s3-torture: remove all cli_nt_error() calls in tortureBjörn Baumbach1-12/+11
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-16s3-torture: replace cli_errstr() with nt_errstr()Björn Baumbach1-6/+10
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-16s3-libsmb: introduce option to disable dos error mappingBjörn Baumbach3-1/+4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-11-16s3:smbd: calculate the negprot signing flags from the signing_stateStefan Metzmacher1-3/+10
We should map from lp_server_signing() just once in srv_init_signing(). metze Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Nov 16 18:59:49 CET 2011 on sn-devel-104
2011-11-16s3: Fix wbinfo socket dir path.Andreas Schneider1-0/+7
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Nov 16 17:19:56 CET 2011 on sn-devel-104
2011-11-16Revert "Fix bug #8453 - smbclient segfaults when dialect option -m is used ↵Stefan Metzmacher1-13/+0
for legacy dialects" This reverts commit f261ac1932ecdae925b27301aa3e907757845a85. We now handle that in cli_state_create(). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 16 15:44:05 CET 2011 on sn-devel-104
2011-11-16s3:libsmb: always init cli->{server_os,server_domain,server_type}Stefan Metzmacher1-0/+13
We should do that at creation time of cli_state. metze
2011-11-16s3-waf: create a smbldap.so library.Günther Deschner4-6/+10
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Nov 16 14:03:05 CET 2011 on sn-devel-104
2011-11-16s3-smbldap: remove dependency to secrets subsystem.Günther Deschner1-17/+4
Guenther
2011-11-16s3-smbldap: extend smbldap_init() with binddn/bindsecret arguments.Günther Deschner5-6/+39
Guenther
2011-11-16s3-smbldap: remove duplicate prototype of smbldap_init().Günther Deschner1-3/+0
Guenther
2011-11-16s3-net: use better state variable name for smbldap_state.Günther Deschner1-9/+9
Guenther
2011-11-16s3-passdb: split out passdb/pdb_ldap_schema.cGünther Deschner13-327/+385
Guenther
2011-11-16s3: move smbldap_util to pdb_ldap_util.Günther Deschner8-21/+52
Guenther
2011-11-16s3-smbldap: use include/smb_ldap.h in smbldap.hGünther Deschner1-1/+1
Guenther
2011-11-16lib/util/debug: with log level = 10 we should be more verboseStefan Metzmacher1-3/+9
log level = 10 already impacts performance, so we can turn on more details and print the pid, [e][u|g]id and class information. So it implies "debug pid = yes", "debug uid = yes" and "debug class = yes". This generates a lot more useful log files. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 16 12:25:02 CET 2011 on sn-devel-104
2011-11-16provision: Set the security descriptor while creating partitionsAmitay Isaacs2-12/+4
With Matthieu's patch, the setting of security descriptor on partition dn at create time works correctly. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
2011-11-16s4-dsdb: rework the NC detection for the descriptor calculationMatthieu Patou1-12/+31
This checks if instanceType attribute is available, and if INSTANCE_TYPE_IS_NC_HEAD bit is set. If the bit is set, then the DN is NC root and security descriptor is not inherited from parent SD. Signed-off-by: Amitay Isaacs <amitay@gmail.com>
2011-11-16s3-s4-upgrade: do not add description if it is empty string or noneAmitay Isaacs1-6/+12
Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Nov 16 05:53:41 CET 2011 on sn-devel-104
2011-11-16Final part of patchset to fix bug #8556 - ACL permissions ignored when ↵Jeremy Allison3-16/+51
SMBsetatr is requested. This now plumbs access checks through all setattr calls. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 16 04:20:04 CET 2011 on sn-devel-104
2011-11-15Remove the check for FILE_WRITE_ATTRIBUTES from smb_set_file_time(). ItJeremy Allison3-8/+17
is called from places like fileio.c that need to update the write time on a file handle only open for write, without neccessarily having FILE_WRITE_ATTRIBUTES permission. Move all checks to before the smb_set_file_time() callers.
2011-11-15Always set the attribute first, before the time.Jeremy Allison1-7/+7
2011-11-15Move handle-based access check into handle codepath.Jeremy Allison1-4/+4
2011-11-15We've already checked fsp must be non-null here.Jeremy Allison1-1/+1
2011-11-15Remove unneeded access check. This is done inside smb_set_file_time().Jeremy Allison1-4/+0
2011-11-15Remove unneeded access check. This is done inside smb_set_file_size().Jeremy Allison1-4/+0
2011-11-15Move handle based access check into handle code path.Jeremy Allison1-4/+4
2011-11-16HEIMDAL:lib/krb5: add utf8 support to build_logon_name() for the PACStefan Metzmacher1-18/+49
Pair-Programmed-With: Arvid Requate <requate@univention.de> metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 16 02:00:12 CET 2011 on sn-devel-104
2011-11-16HEIMDAL:lib/wind: export wind_ucs2write()Stefan Metzmacher1-0/+1
Pair-Programmed-With: Arvid Requate <requate@univention.de> metze
2011-11-16HEIMDAL:lib/winbd: fix wind_ucs2write with WIND_RW_LEStefan Metzmacher1-4/+4
Pair-Programmed-With: Arvid Requate <requate@univention.de> metze
2011-11-16HEIMDAL:lib/wind: fix wind_ucs4utf8() and wind_ucs2utf8()Stefan Metzmacher1-5/+5
Pair-Programmed-With: Arvid Requate <requate@univention.de> metze
2011-11-16Fix bug #8561 - Password change settings not fully observed.Jeremy Allison3-5/+36
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 16 00:22:41 CET 2011 on sn-devel-104
2011-11-15Ensure we correctly calculate reply credits over all returnedJeremy Allison1-4/+13
SMB2 replies, and do as Windows does and return the total in the last SMB2 reply. Fixes an issue found by Christian M Ambach <christian.ambach@de.ibm.com> (and thanks to Christian for the initial patch this was based on).
2011-11-15Remove unneeded NULL check.Jeremy Allison1-4/+0
2011-11-15s4:partition LDB module - fix handling regarding special DNs on searchesMatthias Dieter Wallnöfer1-0/+5
Normally they should always be passed to the main backend unless something different has been specified. Reviewed-by: abartlet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 15 22:43:06 CET 2011 on sn-devel-104
2011-11-15s4:torture/rpc/samr.c - use "NULL" instead of "0" when initialising pointersMatthias Dieter Wallnöfer1-1/+1
2011-11-15s4:join.py - fix typoMatthias Dieter Wallnöfer1-1/+1
2011-11-15s3: allow to set TCP_NODELAYACK socket option on AIXBjörn Jacke1-0/+3
this is the AIX way to disable delayed ACKs, the same like TCP_QUICKACK on Linux Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Tue Nov 15 21:00:07 CET 2011 on sn-devel-104
2011-11-15s3:smbd/aio: handle_aio_completed() should do nothing if aio_ex->fsp is NULLStefan Metzmacher1-0/+5
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 15 18:47:55 CET 2011 on sn-devel-104
2011-11-15s3:smbd/aio: pass ECANCELED to the smb2 aio handlersStefan Metzmacher1-1/+4
metze