summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2008-10-08For the vfs_acl_xattr.c module, make sure we map GENERIC file and directory bitsJeremy Allison5-2/+52
to specific bits every time a security descriptor is set. The S4 torture suite proves that generic bits are not returned when querying an ACL set using them (ie. only the specific bits are stored on disk). Jeremy.
2008-10-08Fixed "might be uninitialized" warningTim Prouty1-2/+2
2008-10-08Deal with inheritance from parent directory when setting WindowsJeremy Allison3-1/+20
ACLs. Jeremy.
2008-10-08Fix bug #5814 - Winbindd dumping core in a strange manner while doing ↵Jeremy Allison1-0/+23
"rescan_trusted_domain". From analysis by hargagan <shargagan@novell.com> : "The winbindd_child_died() is also getting called from process_loop() in case of SIGCHLD signal. In this case it doesn't make the timeout_handler to NULL for the first request. It then initiate a new request using schedule_async_request() which installs a new timeout handler for the same request. In such a case, for a badly unresponsive system both the timeout handler can be called. For the first call the "private_data" will be cleared and for another call the timeout handler will be detecting the double free. So, for such a case as well, the winbindd_child_died() should make the timeout_handler to NULL." Jeremy.
2008-10-08Remove unused CHECK_FSP macroVolker Lendecke2-19/+2
2008-10-08Remove duplicate copy of manual page.Jelmer Vernooij1-83/+0
2008-10-08fix libclinbtsrcdir variable.Jelmer Vernooij3-8/+8
2008-10-08Add manpage for nmblookup, move nmblookup closer to nbt library.Jelmer Vernooij4-17/+237
2008-10-08Merge branch 'master' of ssh://git.samba.org/data/git/sambaJelmer Vernooij13-55/+53
2008-10-08Fix subunit files location after cherrypicks.Jelmer Vernooij8-1/+2
2008-10-07Fix const warning.Jeremy Allison1-1/+1
Jeremy.
2008-10-07Update vfs version as I've added a const to the security_descriptor paramter ↵Jeremy Allison13-54/+52
in fset_nt_acl(). Need to watch the build farm to make sure I haven't broken the AIX or Solaris ACL modules. Jeremy.
2008-10-08Fix path apparently gone wrong by cherrypick.Jelmer Vernooij1-0/+0
2008-10-08Move all subunit files to lib directory.Jelmer Vernooij8-2/+3
2008-10-08Merge branch 'master' of ssh://git.samba.org/data/git/sambaJelmer Vernooij36-275/+906
2008-10-08Fix syntax errors in minschema.Jelmer Vernooij1-20/+16
2008-10-08Import tests for subunit python module.Jelmer Vernooij6-0/+854
2008-10-08Move subunit helper utility to specific subunit directory.Jelmer Vernooij2-1/+1
2008-10-08Allow 'make testenv-dc', 'make testenv-member', etc.Jelmer Vernooij1-0/+3
2008-10-08Print proper error if include file can't be found.Jelmer Vernooij1-0/+4
2008-10-07Make map_errno_from_nt_status() a generic call, not just a cli specific one.Jeremy Allison4-160/+175
Remove some unused calls from vfs_acl_xattr. Test for SD's on existing files. Jeremy.
2008-10-07Changed variable name from f19086872ec734fff3f2119712ff24117bec4e5e to match ↵Tim Prouty1-19/+19
v3-[23]-test
2008-10-06Fixed build warning "passing arg from incompatible pointer type"Tim Prouty1-1/+3
The fix explicitly makes the conversion from timeval to time_t using the existing time utility functions. Compiling modules/vfs_smb_traffic_analyzer.c modules/vfs_smb_traffic_analyzer.c: In function `smb_traffic_analyzer_send_data': modules/vfs_smb_traffic_analyzer.c:173: warning: passing arg 1 of `localtime' from incompatible pointer type
2008-10-06Fixed "declaration shadows global declaration" warnings.Tim Prouty1-19/+19
The patch simply uses a more descriptive variable name for tcp_seq. ../lib/socket_wrapper/socket_wrapper.c:753: warning: declaration of 'tcp_seq' shadows a global declaration /usr/include/netinet/tcp.h:40: warning: shadowed declaration is here ../lib/socket_wrapper/socket_wrapper.c: In function `swrap_marshall_packet': ../lib/socket_wrapper/socket_wrapper.c:919: warning: declaration of 'tcp_seq' shadows a global declaration /usr/include/netinet/tcp.h:40: warning: shadowed declaration is here
2008-10-06Set default trust kvno to -1Andrew Bartlett1-1/+1
2008-10-06Fix cross-realm authentication in Samba4's KDC.Andrew Bartlett1-3/+5
2008-10-06Allow the PAC to be passed along during cross-realm authenticationAndrew Bartlett1-18/+16
2008-10-06Use the trust password version as kvno for trusts in Kerberos.Andrew Bartlett1-0/+7
2008-10-06Start implementing AD-style trusted domains in Samba4's NETLOGON serverAndrew Bartlett1-2/+50
2008-10-06Store trusted domain passwords in the LSA serverAndrew Bartlett1-4/+64
2008-10-06Make RPC-LSA test for enumeration conditions more strictAndrew Bartlett1-3/+14
2008-10-06Add in secure channel type used by AD trustsAndrew Bartlett1-3/+5
2008-10-06Clarify use of manual parsers in trustInOutBlob (drsblobs.idl)Andrew Bartlett1-4/+6
2008-10-06Implement 'type unknown' names in the CrackNames code.Andrew Bartlett3-11/+50
This guesses the type by running each of the possible options. Andrew Bartlett
2008-10-06Remove compleatly bogus rename test in partitions module.Andrew Bartlett1-17/+0
2008-10-06Remove DESCRIPTION from generated schema lines.Andrew Bartlett2-24/+11
This is not permitted in the AD aggregate schema, and more trouble than it is worth in the OpenLDAP schema due to escaping issues. Andrew Bartlett
2008-10-06Fix Domain Trust creation with Windows 2008 (and many other tools)Andrew Bartlett1-1/+5
A dITConentRules attribute (unlike objectClasses) must not contain a 'SUP'. The ADSI layer in Windows would download the whole schema, and validate it. Thanks to the team at Microsoft for very long debugging session to find this. Andrew Bartlett
2008-10-06idmap_adex: Add more debugging to the basic search function.Gerald (Jerry) Carter1-0/+18
Log the dn of all located entries in order to verify search results.
2008-10-06idmap_adex: Add log messages to dc_add_domain for easier debugging.Gerald (Jerry) Carter1-0/+8
Part of continue work on BUG 5806.
2008-10-06s4:rpc_server: tell the gensec layer that we want to do header signingStefan Metzmacher1-0/+4
Note: header signing is still off by default, as the gensec backends don't support it together with seal yet. metze
2008-10-06s4:gensec: pass down want_features to the spnego backend mechStefan Metzmacher3-1/+24
metze
2008-10-06If name_to_fqdn fails, retry with the dns domain the DC gave usVolker Lendecke1-3/+8
This is a workaround for the cases where you want to join under a netbios name that is different from your hostname, i.e. a name that can not be found in /etc/hosts or dns. In these cases, name_to_fqdn fails or gives invalid results.
2008-10-06Log in the parent winbind log where a request is goingVolker Lendecke1-0/+4
2008-10-06Add netlogond auth methodVolker Lendecke4-1/+330
This authenticates against a local running samba4 using SamLogonEx. We retrieve the machine password using samba4's mymachinepwd script and store the schannel key for re-use in secrets.tdb.
2008-10-06Add dyn_NCALRPCDIRVolker Lendecke4-0/+26
2008-10-06Store a local schannel key in secrets.tdbVolker Lendecke3-0/+29
2008-10-06s4:blackbox/test_ldb: test search by <GUID=...> and <SID=...>Stefan Metzmacher1-0/+25
metze
2008-10-05Fix some nonempty blank linesVolker Lendecke1-25/+25
2008-10-05smbd3 is unhappy if stderr is not openVolker Lendecke1-1/+2
2008-10-05Re-enable build of smb_samba3.c after the rename smbd->sambaVolker Lendecke1-1/+1