summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-06-24s4:kdc: implement samba_kdc_check_s4u2proxy()Stefan Metzmacher2-0/+106
metze
2011-06-24s4:samba-tool: add "delegation" subcommands for S4U2Proxy and related stuffStefan Metzmacher2-0/+269
For now this only works on the local sam.ldb, but it shouldn't be hard to improve it to talk to remove servers. Pair-Programmed-With: Björn Baumbach <bb@sernet.de> metze
2011-06-24s4:python/samba/samdb: add toggle_userAccountFlags() helper functionStefan Metzmacher1-10/+35
And let enable_account() use it. Pair-Programmed-With: Björn Baumbach <bb@sernet.de> metze
2011-06-24HEIMDAL:kdc: don't allow self delegation if a backend ↵Stefan Metzmacher1-4/+4
check_constrained_delegation() hook is given A service should use S4U2Self instead of S4U2Proxy. Windows servers allow S4U2Proxy only to explicitly configured target principals. metze
2011-06-24HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()Stefan Metzmacher1-5/+19
This way we can compare the already canonicalized principals, while still passing the client specified target principal down to the backend specific constrained_delegation() hook. metze
2011-06-24HEIMDAL:kdc: use the correct client realm in the EncTicketPartStefan Metzmacher1-1/+1
With S4U2Proxy tgt->crealm might be different from tgt_name->realm. metze
2011-06-24Add NT_STATUS_IO_REPARSE_DATA_INVALIDVolker Lendecke2-0/+3
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jun 24 17:58:00 CEST 2011 on sn-devel-104
2011-06-24s4-lsa: Fix typoSumit Bose1-1/+1
Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Jun 24 16:19:36 CEST 2011 on sn-devel-104
2011-06-24s3:vfs_commit: fix buildBjörn Jacke1-0/+1
fix build Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Fri Jun 24 14:51:31 CEST 2011 on sn-devel-104
2011-06-24s3:smb2_ioctl/FSCTL_PIPE_TRANSCEIVE: generate STATUS_BUFFER_OVERFLOW if ↵Stefan Metzmacher2-0/+10
needed (bug #8260) This should fix DCERPC responses with fragments larger than 1024 bytes. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jun 24 11:25:36 CEST 2011 on sn-devel-104
2011-06-24Merge commit 'release-4-0-0alpha16' into master4-tmpStefan Metzmacher0-0/+0
2011-06-24Merge commit 'release-4-0-0alpha15' into master4-tmpStefan Metzmacher0-0/+0
2011-06-24Merge 2610c05b5b95cc7036b3d6dfb894c6cfbdb68483 as Samba-4.0alpha16Andrew Bartlett1484-25241/+78250
2011-06-24VERSION: on the road to alpha17Andrew Bartlett1-2/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jun 24 08:23:54 CEST 2011 on sn-devel-104
2011-06-24release Samba 4.0 alpha16Andrew Bartlett1-1/+1
2011-06-24Update WHATSNEW.txt with news for Samba 4.0 alpha16Andrew Bartlett2-318/+101
2011-06-24build: Remove blacklist now we have a common buildAndrew Bartlett1-10/+0
2011-06-24release Samba 4.0 alpha16Andrew Bartlett1-1/+1
2011-06-24Update WHATSNEW.txt with news for Samba 4.0 alpha16Andrew Bartlett2-318/+101
2011-06-24s3-build Add dep on popt to fix FreeBSD buildAndrew Bartlett1-1/+1
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jun 24 06:32:59 CEST 2011 on sn-devel-104
2011-06-24build: Remove blacklist now we have a common buildAndrew Bartlett1-10/+0
2011-06-24selftest: Cope with no binary argument being supplied to gdb_backtraceAndrew Bartlett1-11/+25
Modern versions of gdb are better than us at working out what binary is running, and so it is more reliable to omit the binary argument. This change is required because samba4 no longer supplies this argument. Andrew Bartlett
2011-06-24selftest: Remove %PROG% argument from 'panic action'Andrew Bartlett2-2/+2
The debugger or script will need to work out the binary from the PID, as %PROG% support was lost when the setup_fault() code was merged between Samba3 and Samba4. Andrew Bartlett
2011-06-24s3-selftest Remove unused gdb_backtraceAndrew Bartlett1-87/+0
The version in selftest/ has more features and is the one used by 'make test'. Andrew Bartlett
2011-06-24param: Remove remaining references to announce as and announce versionAndrew Bartlett4-64/+0
2011-06-24s3-build Require fully defined symbols in ALL libraries by defaultAndrew Bartlett2-56/+29
The only exception here is libsmbregistry, which needs further work to resolve the library loop caused by the registry based smb.conf loading. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jun 24 05:01:38 CEST 2011 on sn-devel-104
2011-06-24s3-build: Require fully defined symbols for all public librariesAndrew Bartlett1-1/+1
2011-06-24s3-build: Remove SECRETS3 as a samba3core depAndrew Bartlett1-5/+10
This resolves the the library loop between libsmbconf and SECRETS3/passdb, and allows the next commit to require fully defined symbols in public libraries. Andrew Bartlett
2011-06-24s3-param Remove %(DomainSID) supportAndrew Bartlett1-102/+0
This also removes the now unused longvar support. This experiment never took off. Fixing this allows me to resolve the the library loop between libsmbconf and SECRETS3/passdb. Andreas correctly points out that this loop originally comes from my patch to obtain the domain sid from passdb (25cfa29e29bdbb6c84bd85ea02ec542228ae585f), but as I would prefer to keep that feature, I'm hoping to break the loop here instead. Andrew Bartlett
2011-06-24Fix bug #8254 - "acl check permissions = no" does not work in all casesJeremy Allison2-2/+16
Move lp_acl_check_permissions() into can_delete_file_in_directory() where it makes sense. Remove ACL check when requesting DELETE_ACCESS when lp_acl_check_permissions is false. Thanks to John Janosik @ IBM for noticing this. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jun 24 01:18:11 CEST 2011 on sn-devel-104
2011-06-23build: Add a script to install python and Samba with one commandAndrew Bartlett1-0/+41
This should help folks on systems that don't have a recent python provided by the OS. Python is installed into the same prefix as Samba, not in the default path. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Jun 23 14:56:54 CEST 2011 on sn-devel-104
2011-06-23s3-param Remove 'announce version' parameterAndrew Bartlett10-103/+22
The only users I can find of this on the internet involve confused users, and our own documentation recommends never setting this. Don't confuse our users any longer. Andrew Bartlett
2011-06-23param: Remove "announce as" parameterAndrew Bartlett5-98/+4
2011-06-23s3-net: Bind our gettext results to 'unix charset'Andrew Bartlett3-2/+12
This ensures that the translations and any embedded strings are in the same charset. It won't be the one from the user's locale (we no longer auto-detect that), but it will be self-consistent. Thanks to Steve Langasek for pointing this function out! Andrew Bartlett
2011-06-23s3-swat Remove d_printf() callsAndrew Bartlett1-2/+2
These calls only ever output ASCII strings (protocol strings and debugging), and never user content, so make it clear that these don't need to be converted into UTF8. Andrew Bartlett
2011-06-23lib/util/charset: Remove autodetection of charset from LOCALEAndrew Bartlett3-34/+3
In the past, our LOCALE would set the display charset of Samba. The display charset has now been removed. This patch removes the support code that detected the locale from the environment. We cannot safely have 'unix charset' follow the locale (at it creates files on disk and entries in databases that must not vary), so this code is unused. As an example, imagine a database is manipulated in the administrator's locale, and then read by smbd starting up in the system default locale. Or smbd restarted by the administrator rather than a startup script. Both of these situations could corrupt databases or filenames on disk. Andrew Bartlett
2011-06-23lib/util/charset: Remove 'display charset'Andrew Bartlett13-157/+63
As discussed in 'CH_DISPLAY and gettext' on the samba-technical list: http://lists.samba.org/archive/samba-technical/2011-June/078190.html Setting this to a value other than 'unix charset' does not make sense, as any system where the filesytem charset does not equal the terminal charset will already have problems with programs as simple as 'ls'. It also means that our output could not be pasted as our input in interactive programs or onto our command line, as we never did translate in the DISPLAY -> UNIX direction. The d_printf() calls are retained in case we need to revisit this, and to support display_set_stderr(). Andrew Bartlett
2011-06-23s3: Add IO_REPARSE_TAG_SYMLINK defineVolker Lendecke1-0/+1
From http://msdn.microsoft.com/en-us/library/dd541667%28v=PROT.13%29.aspx Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jun 23 13:46:37 CEST 2011 on sn-devel-104
2011-06-23s3: Fix some nonempty blank linesVolker Lendecke1-3/+3
2011-06-23s3: remove prototype of convert_string_error from proto.hMichael Adam1-4/+0
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Jun 23 12:34:31 CEST 2011 on sn-devel-104
2011-06-23s3: remove prototype of convert_string from proto.hMichael Adam1-4/+0
2011-06-23dfsreferral: search client's site and use itMatthieu Patou1-2/+2
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Jun 23 01:50:39 CEST 2011 on sn-devel-104
2011-06-22s4-dbcheck: fix uninitialized errstr in err_dn_target_mismatchMatthieu Patou1-2/+3
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Jun 22 21:22:27 CEST 2011 on sn-devel-104
2011-06-22s4-dbcheck: remove unused includeMatthieu Patou1-1/+1
2011-06-22s4-schema: avoid segfaulting if id3.guid is NULLMatthieu Patou1-2/+1
2011-06-22s4-samba_dnsupdate: set environment via the env parameterMatthieu Patou1-1/+1
I faced a situation where the os.environ("KRB5CCNAME") = ... didn't seems to be effective
2011-06-22s4-upgradeprovision: Don't forget to populate the non replicated objects, ↵Matthieu Patou1-2/+4
and don't touch rIDPreviousAllocationPool
2011-06-22dbchecker: cope with a broken link to Deleted ObjectsAndrew Tridgell1-2/+9
if a DN link to Deleted Objects has a bad GUID, we need to use show_deleted
2011-06-22dbchecker: fixed argument error for -H and DNAndrew Tridgell1-1/+1
2011-06-22dbchecker: when fixing a bad GUID in a DN, search by the string DNAndrew Tridgell1-1/+1
generated by cgit (git 2.34.1) at 2024-07-05 22:12:43 +0000