summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-04-05s3-auth use create_local_token() to transform server_info -> session_infoAndrew Bartlett9-183/+193
Before a auth_serversupplied_info struct can be used for authorization, the local groups and privileges must be calculated. create_local_token() now copies the server_info, and then sets the calulated token and unix groups. Soon, it will also transform the result into an expanded struct auth_session_info. Until then, the variable name (server_info vs session_info provides a clue to the developer about what information has been entered in the structure). By moving the calls to create_local_token within the codebase, we remove duplication, and ensure that the session key (where modified) is consistently copied into the new structure. Andrew Bartlett
2011-04-04Move SET_STAT_INVALID call added by Volker as fix for bug 8042 - Newly ↵Jeremy Allison1-3/+3
create files are always failed with NT_STATUS_FILE_IS_A_DIRECTORY Ensure we do this for all cases where the stat fails. Jeremy Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Apr 4 20:08:45 CEST 2011 on sn-devel-104
2011-04-04Note that check_parent_exists() doesn't change the contents of smb_fname ↵Jeremy Allison1-1/+1
(add const).
2011-04-04s3-net: add command "net idmap check"Gregor Beck7-3/+1109
This is a tool to check the consistency of an idmap tdb database. The default mode is to scan the database and list invalid entries, e.g. records with an invalid format, or records which are valid but for which the reverse mapping entry is missing. With the "--repair" switch, one can enter an interactive repair mode which will prompt for each invalid entry found with the option to delete, skip or edit the record. There is also a non-interactive repair mode triggered by "--auto" which will remove all records with invalid content and fill up mappings which are missing the reverse entry. The "--test" parameter lets "net idmap check" only list the changes that would be written and not actually commit them to the database. The "--lock" option allows to lock the database already in the first reading traverse, in order to remove the race when the database has to be closed and reopened again before writing the changes. Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Apr 4 18:21:09 CEST 2011 on sn-devel-104
2011-04-04s3: add function srprs_quoted to parse strings written with cbuf_print_quotedGregor Beck2-1/+52
2011-04-04s3: add function cbuf_print_quotedGregor Beck2-1/+49
2011-04-04s3: add function dbwrap_traverseGregor Beck2-0/+12
2011-04-04s3: add function dbwrap_trans_traverseGregor Beck2-0/+33
2011-04-04s3: fix cbuf_swapptrGregor Beck1-0/+2
2011-04-04s3:idmap_tdb2: fix build of tdb2Michael Adam1-0/+1
The include of system/filesys.h was removed from includes.h. ...
2011-04-04s3-rpc_server Remove comment, yes the key is correct.Andrew Bartlett1-2/+0
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 4 13:31:52 CEST 2011 on sn-devel-104
2011-04-04s3-auth consolidate create_local_token() into make_server_info_krb5()Andrew Bartlett6-51/+19
This ensures that all callers don't need to each add builtin groups and privileges to the user's token Andrew Bartlett
2011-04-04s3-selftest Remove more instances of /tmp in test_smbclient_s3.shAndrew Bartlett1-4/+4
2011-04-04s3-selftest Add testing of kerberos loginAndrew Bartlett4-4/+80
This uses a pre-calculated credentials cache, that should be valid until 2036. Andrew Bartlett
2011-04-04s4-credentials Add a command line hook to set the kerberos credentials cacheAndrew Bartlett1-1/+13
This allows this to be specified independent of the KRB5CCNAME environment variable (in this case, it's harder than it should be to set up in the make test for s3 that way). Andrew Bartlett
2011-04-04s3-selftest Disable log rotation in 'make test'Andrew Bartlett1-0/+1
2011-04-04talloc - some documentation changesMatthias Dieter Wallnöfer2-53/+48
- Fix some typos - Document better the differences in the behaviour between talloc 1.X and 2.X. Previously this seemed a bit spongy to me. Reviewed-by: Jelmer + Tridge Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Apr 4 11:05:42 CEST 2011 on sn-devel-104
2011-04-04s4-dsdb: implemented creation of conflict recordsAndrew Tridgell1-48/+356
when a record with the same DN gets created on two DCs at the same time, this creates a replication conflict. To resolve this conflict one of the DCs needs to create a conflict record, which is a rename of one of the two DNs, based on which one is newer. This prevents replication from failing when DCs are temporarily disconnected and then have conflicts when they next replicate Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Apr 4 03:27:07 CEST 2011 on sn-devel-104
2011-04-04s4-samba-tool: give a bit better error on user delete failureAndrew Tridgell1-1/+5
2011-04-04s4-rpc: improved error mapping for several RPC server callsAndrew Tridgell4-26/+22
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-04s4-dsdb: added a ldb err -> NTSTATUS mappingAndrew Tridgell1-0/+78
this is not perfect, but its better than always giving NT_STATUS_UNSUCCESSFUL in our RPC servers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-04s4-krb5: be a bit less verbose about krb5 packetsAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-04s4-loadparm: be a bit less verbose about smb.conf processingAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-04s4-libnet: honour convention of DEBUGLEVEL>=10 for NDR printAndrew Tridgell2-0/+16
2011-04-04debug: default debug to stderr Andrew Tridgell1-1/+2
if setup_logging() hasn't been called then default to sending debug to stderr Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-03Avoid uppercasing server role in error message.Jelmer Vernooij1-1/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Apr 3 20:01:48 CEST 2011 on sn-devel-104
2011-04-03s3: Remove some unused codeVolker Lendecke1-7/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Apr 3 18:32:51 CEST 2011 on sn-devel-104
2011-04-03Fix compilation without external heimdal.Jelmer Vernooij2-0/+2
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Apr 3 17:18:56 CEST 2011 on sn-devel-104
2011-04-03use system heimdal headers if possible, fix missing dependencies on hx509 ↵Jelmer Vernooij3-5/+12
and krb5 libraries.
2011-04-03s3: Add a quick test for bug 8042Volker Lendecke6-0/+84
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Apr 3 16:13:21 CEST 2011 on sn-devel-104
2011-04-03s3: Fix bug 8042: File creation on OS/XVolker Lendecke1-0/+3
With a case insensitive file system the stat cache lookup leaked the parent directorys stat information from unix_convert into the smb_filename. This led open_file_ntcreate to believe it just created a directory. In the case where we do the search we already invalidate the stat struct. Thanks to TAKAHASHI Motonobu for insisting! :-) Volker Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Apr 3 14:54:27 CEST 2011 on sn-devel-104
2011-04-03Fix for servers that don't put a path separator at the end of the service.Larry Reid1-4/+13
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Apr 3 10:33:42 CEST 2011 on sn-devel-104
2011-04-02s3:waf: add cluster support / ctdb checks.Michael Adam1-0/+196
The checks are roughtly taken from the autoconf ctdb checks. I was not able to implement checks with CHECK_DECL, CHECK_TYPE, CHECK_HEADER and friends, because the ctdb headers seem to need too special a setup of includes and defines in order to compile. So I used CHECK_CODE() in all checks. In the long run, this should be changed. I supported a --with-ctdb-dir options to allow for building against a ctdb that is not installed into /usr (e.g. against a local git checkout). In order to implement this, I had to hand includes in to the CHECK_CODE function. Here I found a problem with CHECK_CODE (or even the core waf conf.check() function: The CHECK_CODE function does not expand the includes it gets (i.e. '#' is not expanded to the base dir, and relative paths are left relative). But the core check() function seems to ignore all include paths that are not absolute paths. Hence in particular the usual default '# .' for the includes is useless. So I preprocessed the list of includes for the cluster checks. But I assume that it would be useful to move this expansion into CHECK_CODE or even into the core waf check function. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Sat Apr 2 03:26:55 CEST 2011 on sn-devel-104
2011-04-02s3:waf:compare_config_h3.sh: make diff tool configurable as env var "DIFF"Michael Adam1-3/+5
2011-04-02s3:waf:compare_config_h3.sh: specify autoconf-config.h as commandline parameterMichael Adam1-1/+6
2011-04-02Fix bug #7987 - ACL can get lost when files are being renamed.Jeremy Allison3-1/+49
There is no reason for smbd with Windows ACLs to use chmod or fchmod unless it's a file opened with UNIX extensions or with posix pathnames. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Apr 2 02:40:43 CEST 2011 on sn-devel-104
2011-04-01Fix bug #8047 - mdns registration doesn't work if "interfaces" is used in ↵Marc A. Dahlhaus1-0/+7
smb.conf Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Apr 1 23:15:34 CEST 2011 on sn-devel-104
2011-04-01s3: Fix Coverity ID 1137: CONSTANT_EXPRESSION_RESULTVolker Lendecke1-2/+2
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Apr 1 09:35:19 CEST 2011 on sn-devel-104
2011-04-01s3: Fix Coverity ID 1136: CONSTANT_EXPRESSION_RESULTVolker Lendecke1-1/+1
2011-03-31debug: Restore the s3-style check in check_log_size()Volker Lendecke1-1/+6
This has caused me considerable grief. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Mar 31 19:42:38 CEST 2011 on sn-devel-104
2011-03-31s3:configure: allow building without SCHEDULE_FOR_DELETION with ↵Michael Adam1-2/+6
--enable-old-ctdb Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Mar 31 18:55:38 CEST 2011 on sn-devel-104
2011-03-31s3:configure: introduce "--enable-old-ctdb" to enable enforcing build ↵Michael Adam1-0/+6
against old ctdb
2011-03-31s3:configure: add check for new CTDB_CONTROL_SCHEDULE_FOR_DELETIONMichael Adam1-0/+19
2011-03-31s3:configure: rework logic of ctdb/clustering checksMichael Adam1-77/+113
2011-03-31s3:configure: remove unused variable CTDB_CFLAGSMichael Adam1-2/+0
2011-03-31s3:configure: fix a comment.Michael Adam1-1/+1
2011-03-31s3:dbwrap_ctdb: in ctdb_delete, send a SCHEDULE_FOR_DELETION control to ↵Michael Adam1-1/+56
local ctdbd This way, the record will be scheduled for fast vacuuming. This is sent with the NOREPLY flag, so ctd should not sent a reply packet and samba does not expect one. Hence, it is not important for the success of the db_ctdb_delete command whether or not the ctdbd we are running against supports the SCHEDULE_FOR_DELETION control.
2011-03-31s3:ctdb: pass the ctdb control flags to the ctdb daemon when sending the controlMichael Adam1-0/+1
The only flag that is currently used is the NOREPLY flag to indicate that the client expects no reply packet. This needs to get passed down to the ctdb daemon so that it really does not send a reply.
2011-03-31s3:ctdb: samba can now handle the NOREPLY flagMichael Adam1-3/+0
Revert "samba3 can't handle NOREPLY yet" This reverts commit 9bf211db6d7d6ef6e59508de69d6d8dfe5bae059.
2011-03-31s3:ctdb: correctly handle cstatus if CTDB_CTRL_FLAG_NOREPLY is set.Michael Adam1-0/+3