summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-06-11A script to compare the differences in nTSecurityDescriptor between 2 hostsNadezhda Ivanova1-0/+153
This script walks the schema, configuration and domain partitions of the locally installed Ldb and a remote hosts and compares the descriptors disregarding the difference in domain SID. The goal is to make sure a freshly provisioned Samba has the correct descriptors so ACLs work correctly. It outputs the descriptors in short SDDL, where the correct SIDs are to be replaced during provisioning. Optionally it can be output as an LDIF file with the current local domain and domain SIDs.
2009-06-11Don't recurse in reopen_logs().Andrew Bartlett1-0/+6
Use the state to avoid recursion in reopen_logs(), as DEBUG() can call this function. Andrew Bartlett
2009-06-10Implement pdb_ads_set_aliasinfoVolker Lendecke1-1/+68
2009-06-10pdb_default_aliasinfo is just fine for pdb_ads right nowVolker Lendecke1-8/+1
2009-06-10Implement pdb_ads_lookup_ridsVolker Lendecke1-3/+69
2009-06-10Fix a segfault in pdb_ads_delete_user()Volker Lendecke1-3/+11
If a user comes from the passdb cache, priv is NULL
2009-06-10s3: Prepare the first set of SMB_VFS_CREATE_FILE callers to take an ↵Tim Prouty6-214/+333
smb_filename struct Some of the callers required minimal changes, while others (copy_internals) required significant changes. The task is simplified a little bit because we are able to do operations and checks on the base_name when a stream isn't used. This patch should cause no functional changes. Volker, Jeremy: Please check
2009-06-10s3: Add utility function for copying an smb_filename structTim Prouty2-0/+42
2009-06-10s3: Remove the now unused CFF_DOS_PATH flagTim Prouty1-5/+0
All paths are now unix paths, making this flag useless. This flags argument is now unused and can be safely removed.
2009-06-10s3: Remove unix_convert handling from createfile implementationsTim Prouty2-59/+8
2009-06-10s3: Make all callers of SMB_VFS_CREATEFILE call unix_convert firstTim Prouty5-149/+256
This step is a requirement to change SMB_VFS_CREATEFILE to take an smb_filename struct.
2009-06-10s3: Remove extraneous calls to unix_convertTim Prouty1-6/+0
Not only are these unnecessary in spirit because unlink_internals calls unix_convert, but in practice the return value is simply being ignored right now.
2009-06-10s3: Remove unused stat structs being passed to SMB_VFS_CREATE_FILETim Prouty2-8/+2
2009-06-10s3-libwbclient: fix unresolved symbols in libwbclient.Günther Deschner1-1/+5
Kai, please check. Guenther
2009-06-10lib-util: move set_blocking() call into own file.Günther Deschner4-32/+65
Guenther
2009-06-10Make ctemp async. Fix the test to pass against W2K3.Jeremy Allison4-42/+150
Jeremy.
2009-06-10s3-build: Fix make test_shlibs and test_nss_modules.Günther Deschner1-2/+2
Guenther
2009-06-10mount.cifs: explicitly handle non AF_INET/AF_INET6 addressesJeff Layton1-0/+2
If we get a non-AF_INET(6) address, then just skip it and try the next one in the list. Signed-off-by: Jeff Layton <jlayton@redhat.com>
2009-06-10s3/docs: Fix typos.Karolin Seeger1-3/+3
Fix typos reported by OPC oota <t-oota [at] dh.jp.nec.com>. Thanks! Karolin
2009-06-10fixed some places where RPC-SECRETS needs to be changed to RPC-LSA-SECRETSAndrew Tridgell1-6/+6
this copes with a rename of SECRETS to LSA-SECRETS in an earlier patch by gd
2009-06-10fixed the encoding/decoding of the reverse attribute for server side sortAndrew Tridgell1-3/+10
2009-06-10added asn1 functions for handling booleans in a simple contextAndrew Tridgell2-0/+25
2009-06-10Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005Donald T. Davis1-154/+448
Compiled with Andrew over a series of phone calls and gobby sessions, with the aim of documenting Kerberos requirements for Samba to us an alternate (ie, MIT) Kerberos library. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-06-10Remove copy of kerberos-notes.txt added in incorrect locationAndrew Bartlett1-760/+0
2009-06-10Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005Donald T. Davis1-0/+760
Compiled with Andrew over a series of phone calls and gobby sessions with Andrew, with the aim of documenting Kerberos requirements for Samba to us an alternate (ie, MIT) Kerberos library. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-06-10fixed server side sort controlAndrew Tridgell1-4/+7
when sorting a record that does not have the requested sort attribute then put those records last in the sort result
2009-06-10fixed server side sorting of case-insensitive stringsAndrew Tridgell1-3/+0
The sort module uses ldb_comparison_fold() as the comparison function for case-insensitive attributes. In other places the function is being used to produce a boolean, but for sorting we care about ordering. The n1 - n2 return was sorting by length, not value
2009-06-09If there are no mods, don't bother the ldap serverVolker Lendecke1-0/+5
2009-06-09Some more fields in pdb_ads_init_ads_from_sam()Volker Lendecke1-0/+20
2009-06-09Fix installation path of the subunit python modules.Timur I Bakeyev1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2009-06-09s4-tests: Add separate variable for tap2subunit.Jelmer Vernooij1-2/+3
2009-06-09Do not pull samAccountName twiceVolker Lendecke1-7/+0
2009-06-09s3:smbd: only check the next_status for related requestsStefan Metzmacher1-11/+12
metze
2009-06-09s3:smbd: response with the same SMB2 flags as given by the clientStefan Metzmacher1-1/+4
...but also add the response flag. metze
2009-06-09s3:smbd: only pass the chained file handle for related compounded SMB2 requestsStefan Metzmacher1-0/+4
metze
2009-06-09s3:smbd: make sure we pad compounded SMB2 responses to 8 bytesStefan Metzmacher1-2/+47
metze
2009-06-09s3:smbd: skip file handle checks for SMB2 compounded requestsStefan Metzmacher5-6/+16
metze
2009-06-09s3:smbd: more validation of the incoming SMB2 requestsStefan Metzmacher2-4/+96
metze
2009-06-09s3:smbd: for now ignore all non NBT Session Message requests for SMB2Stefan Metzmacher1-0/+9
metze
2009-06-09s3:smbd: don't include 1 byte padding for the dynamic buffer of SMB2 responsesStefan Metzmacher1-21/+9
It seems that Windows 2008 and Windows 7 doesn't do this anymore. metze
2009-06-09SMB2-COMPOUND: add some tests for invalid requestsStefan Metzmacher1-0/+201
TODO: check why the INVALID1 tests fails with --signing=required. metze
2009-06-09s4:smb2srv: don't allow the related flag on the first request in a ↵Stefan Metzmacher1-0/+7
compounded chain metze
2009-06-09s4: smbcli_transport_send hit the socket right away if possibleSam Liddicott1-0/+7
[Metze; "make test" on git master outputs exactly the same test summary with our without this patch (apart from the "using seed" lines)] If the transport socket is writable, then push the queue along rather than wait until the caller returns back to the tevent loop. This strategy keeps the sockets piping hot, and is particularly good for cases where reading requests from one socket causes lots of writes on another socket, or where lots of writes are made in a batch. It doesn't matter if the socket is not writeable yet, packet_queue_run will return quite cheaply in such a case. Signed-off-by: Sam Liddicott <sam@liddicott.com> Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-06-09net: Only use the in memory ccache when not already using a kerberos ticket ↵Kai Blin1-1/+2
in net ads
2009-06-09s4:torture: add SMB2-COMPOUND testStefan Metzmacher3-1/+245
metze
2009-06-09s4:smb2srv: correctly fail remaining compounded requests after a failureStefan Metzmacher2-5/+18
metze
2009-06-09s4:smb2srv: remove old TODO comment, we already check the seqnumStefan Metzmacher1-2/+0
metze
2009-06-09s4:smb2srv: fix handling of multiple compounded requestsStefan Metzmacher1-7/+12
metze
2009-06-09s4:smb2srv: remove the chained file handle on closeStefan Metzmacher1-0/+4
metze
2009-06-09s4:libcli/smb2: add smb2_transport_credits_ask_num()Stefan Metzmacher3-2/+13
metze