summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-09-06smb2_constants: add SMB2_WRITEFLAG_WRITE_THROUGH defineStefan Metzmacher1-0/+2
metze
2011-09-06s4:librpc: rpc_common.h was move to dcerpc-bindingStefan Metzmacher1-1/+1
metze
2011-09-06s4:auth/gensec: gensec.h was moved to gensec_runtimeStefan Metzmacher1-1/+1
metze
2011-09-06waf: install pam modules in PAMMODULESDIR.Günther Deschner2-0/+2
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Sep 6 11:09:45 CEST 2011 on sn-devel-104
2011-09-05s3:smb2_server: add basic support for SMB 2.1Stefan Metzmacher4-5/+67
This adds support for the 2 stage negprot, from SMB 1 to SMB 2.1. Support for this of for now and "max protocol = SMB2" still maps to "max protocol = SMB2_02" PROTOCOL_SMB2_02. In order to activate smb2.1, you need to use "max protocol = SMB2_10". metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 5 19:30:58 CEST 2011 on sn-devel-104
2011-09-05s3:smb2_server: return NOT_SUPPORTED if we don't find a common dialect with ↵Stefan Metzmacher1-6/+8
the client metze
2011-09-05s3:smb2_server: max_trans, max_read and max_write are limited to 64 kilobytesStefan Metzmacher1-3/+17
Only if SMB2_CAP_LARGE_MTU is supported we should announce larger limits. metze
2011-09-05s3:smb2cli: make sure we don't try to send requests on a disconnected cli_stateStefan Metzmacher1-0/+5
metze
2011-09-05s3:smb2cli: make sure requests are not finished, when we send when to the ↵Stefan Metzmacher1-0/+4
network metze
2011-09-05s3:smb2cli: disconnect the connection, if we're out of message idsStefan Metzmacher1-1/+15
metze
2011-09-05s3:smb2cli: don't use state->cli->smb2.mid++ as macro argumentStefan Metzmacher1-1/+5
It gets expanded multiple times. metze
2011-09-05s3-smbd: Rename reload_printers() and add documentation.Andreas Schneider5-11/+22
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Mon Sep 5 17:59:47 CEST 2011 on sn-devel-104
2011-09-05s3: Fix smbcontrol smbd idmap kill S-1-5-21-...Volker Lendecke1-6/+20
The calls to sid_to_gid and sid_to_uid create id mapping entries themselves, which makes it pretty difficult to reliably delete id mapping entries everywhere just using a SID. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Sep 5 16:30:41 CEST 2011 on sn-devel-104
2011-09-05s3: Reformat msg_idmap.c to match Samba codingVolker Lendecke1-13/+19
2011-09-05libcli/smb: add PROTOCOL_SMB2_10Stefan Metzmacher1-1/+2
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 5 14:57:06 CEST 2011 on sn-devel-104
2011-09-05libcli/smb: remove PROTOCOL_SMB2 alias of PROTOCOL_SMB2_02Stefan Metzmacher1-1/+0
metze
2011-09-05s3:smbd: make use of PROTOCOL_SMB2_02Stefan Metzmacher1-1/+1
metze
2011-09-05s4:libcli/raw: make use of PROTOCOL_SMB2_02Stefan Metzmacher1-1/+1
metze
2011-09-05s4:ntvfs: s/!= PROTOCOL_SMB2/< PROTOCOL_SMB2_02/Stefan Metzmacher4-8/+8
metze
2011-09-05s4:ntvfs: s/== PROTOCOL_SMB2/>= PROTOCOL_SMB2_02/Stefan Metzmacher8-9/+9
metze
2011-09-05s4:smb_server: make use of PROTOCOL_SMB2_02Stefan Metzmacher3-3/+3
metze
2011-09-05s4:param: make use of PROTOCOL_SMB2_02Stefan Metzmacher1-1/+2
metze
2011-09-05libcli/smb: move smb2_signing.c to the toplevelStefan Metzmacher7-13/+42
metze
2011-09-05s4-cracknames: fixed cracknames to use more specific searchAndrew Tridgell1-13/+12
this uses the bitwise comparison ldap operators to ensure we only get NC roots Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Sep 5 12:48:39 CEST 2011 on sn-devel-104
2011-09-05s4-cldap: fixed cldap search based on dom_sidAndrew Tridgell1-15/+4
we were not filling in the sid pointer correctly for the ldb_search Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05ndr: range check on push of dom_sid blobAndrew Tridgell1-1/+4
this ensures we get an error if we try to push a dom_sid with too many sub_auths Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-ldb: allow decoding of trustAuthIncoming and trustAuthOutgoingAndrew Tridgell2-0/+23
this allows --show-binary to display trustAuthOutgoing and trustAuthIncoming NDR blobs. Useful for debugging trust issues Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett1-1/+10
2011-09-05s4-samdb: added a few function comments for pydocAndrew Tridgell1-0/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-provision: these substitutuons are not used any moreAndrew Tridgell1-4/+1
we now create partitions dynamically Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-09-05drsblobs: fixed alignment of drs blobs authentication informationAndrew Tridgell1-5/+5
the two types of ndr flags were being mixed up, so NDR_BUFFERS was being interpreted as LIBNDR_FLAG_NOALIGN Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-torture: enable password comparison in drsblobs testAndrew Tridgell1-2/+2
I'm not sure why this was commented out, as it does pass Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-torture: fixed a ndr string errorAndrew Tridgell1-1/+1
the dos charset global changes with the new loadparm context Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-05s4-s3-upgrade Fix error handling in add_users_to_groupAndrew Bartlett1-2/+5
2011-09-05s4-schema consolidate schema handlingAndrew Bartlett3-80/+48
It also creates a single routine dsdb_load_ldb_results_into_schema() to handle cases where the schema is in the form of an ldb_result. Andrew Bartlett
2011-09-05s3-spoolssd: Remove stale printers only on a valid pcap update.Andreas Schneider1-2/+2
load_printers() removes stale printers and we should only remove them if we have a CUPS connection and talked to cups. Else we will remove every configured printer if cups is not available. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Mon Sep 5 11:18:23 CEST 2011 on sn-devel-104
2011-09-05s4-provision handle a number of invalid but real-world upgrade casesAndrew Bartlett1-9/+36
Real world databass have the wrong account flags (U and W at the same time) and have the wrong group type in group mapping databases. Cope with these. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Sep 5 04:58:09 CEST 2011 on sn-devel-104
2011-09-05s4-provision Fix type error on existing idmap entries in s3 upgradeAndrew Bartlett1-1/+1
This is already a DN object. Andrew Bartlett
2011-09-05s4-dsdb Print clearer error messages when invalid account flags are ↵Andrew Bartlett1-0/+9
specified on add
2011-09-05s4-provision Use ProvisioningError and the eadbAndrew Bartlett2-6/+27
The eadb flag tells us to avoid using system extended attributes, typcially if we are not running as root (ie, in a test environment). The ProvisioningError class allows us to return failures to the upgrade_from_s3 script which can then be detected correctly by the selftest framework. Andrew Bartlett
2011-09-05s4-provision Add realm to DC configuration in upgrade_from_s3 testAndrew Bartlett1-0/+1
2011-09-04s4-provision Allow a missing idmap DB in upgrade.pyAndrew Bartlett1-2/+9
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun Sep 4 06:34:16 CEST 2011 on sn-devel-104
2011-09-04s4-provision cope with SID_NAME_WKN_GRP mappings in upgrade.pyAndrew Bartlett1-1/+5
Some incorrect LDAP backends have entries with this group type, but due to the pdb_ldap code, we cannot read the group members, and we already skip them in add_group_from_mapping_entry(). Andrew Bartlett
2011-09-03s3:smb2cli: ask for a session key in smb2cli_sesssetup_send()Stefan Metzmacher1-0/+3
This is needed if we want to support SMB2 signing later. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Sep 3 16:21:35 CEST 2011 on sn-devel-104
2011-09-03s3-spoolss: Fix bug #8236 empty notify servername.Andreas Schneider1-0/+9
Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Sep 3 02:58:42 CEST 2011 on sn-devel-104
2011-09-03Part 5 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison1-4/+21
(Invalid argument) Be smarter about setting default permissions when a ACL_GROUP_OBJ isn't given. Use the principle of least surprises for the user. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Sep 3 00:16:05 CEST 2011 on sn-devel-104
2011-09-02Part 4 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison1-8/+11
(Invalid argument) Be smarter about setting default permissions when a ACL_USER_OBJ isn't given. Use the principle of least surprises for the user.
2011-09-02Part 3 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison1-7/+6
(Invalid argument) Don't call check_owning_objs() to convert ACL_USER->ACL_USER_OBJ and AC_GROUP->ACL_GROUP_OBJ for default (directory) ACLs, we do this separately inside ensure_canon_entry_valid().
2011-09-02Part 2 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison1-0/+38
(Invalid argument) Only map CREATOR_OWNER/CREATOR_GROUP to ACL_USER_OBJ/ACL_GROUP_OBJ in a default(directory) ACL set.
2011-09-02Part 1 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison1-72/+0
(Invalid argument) Remove the code I added for bug "6878 - Cannot change ACL's inherit flag". It is incorrect and causes the POSIX ACL ACL_USER_OBJ duplication.