summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-09-09Second part of fix for bug #8443 - Default user entry is set to minimal ↵Jeremy Allison1-8/+11
permissions on incoming ACL change with no user specified. Be smarter about setting default permissions when a ACL_USER_OBJ isn't given. Use the principle of least surprises for the user. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Sep 9 00:26:08 CEST 2011 on sn-devel-104
2011-09-08First part of fix for bug #8443 - Default user entry is set to minimal ↵Jeremy Allison1-58/+2
permissions on incoming ACL change with no user specified. create_default_mode() is not needed - it's taken care of by code inside ensure_canon_entry_valid().
2011-09-08Fix bug #8203 - winbindd needs to reset the DC connection if an RPC times out.Jeremy Allison1-15/+66
Based on Volker's original code. (cherry picked from commit 5b5ef7f20d34f4c6c1d3d02530ac7b13e051c960) Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Sep 8 21:29:53 CEST 2011 on sn-devel-104
2011-09-08s3:torture: make use of CLI_FULL_CONNECTION_DONT_SPNEGOStefan Metzmacher1-4/+11
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Sep 8 19:23:32 CEST 2011 on sn-devel-104
2011-09-08s3:torture: make use of CLI_FULL_CONNECTION_FORCE_DOS_ERRORSStefan Metzmacher1-1/+8
metze
2011-09-08s3:libsmb: add CLI_FULL_CONNECTION_FORCE_ASCIIStefan Metzmacher3-1/+12
metze
2011-09-08s3:libsmb: add CLI_FULL_CONNECTION_FORCE_DOS_ERRORSStefan Metzmacher2-1/+5
metze
2011-09-08s3:libsmb: don't handle CLI_FULL_CONNECTION_* flags in cli_full_connection()Stefan Metzmacher1-4/+0
This is already done by cli_state_create(). metze
2011-09-08s3:libsmb: don't handle CLI_FULL_CONNECTION_* flags in cli_start_connection()Stefan Metzmacher1-13/+0
This is already done by cli_state_create(). metze
2011-09-08s4-param void function cannot return valueAndrew Bartlett1-1/+2
This is even if the returned function is void, on Solaris. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 16:38:30 CEST 2011 on sn-devel-104
2011-09-08s3-loadparm: fixed re-application of cmdline parametric optionsAndrew Tridgell1-1/+4
this ensures that cmdline parametric options are re-applied when we reload smb.conf Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s3-loadparm: fixed a memory leak in parametric optionsAndrew Tridgell1-1/+2
before we memset the Globals structure we need to free any global parametrics Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08nsswitch: make the wbcSidsToUnixIds() parser more robustAndrew Tridgell1-2/+2
this allows it to handle new types of responses Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-winbindd: implement WINBINDD_SIDS_TO_XIDSAndrew Tridgell2-1/+97
this fixes wbinfo --sids-to-unix-ids Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-winbindd: fixed handling of extra_data in s3 requestsAndrew Tridgell1-1/+37
extra_data in s3 winbind requests is appended to the end of the request, but does not change the length header of the packet. Instead you need to get it from the extra_len element of the request structure. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-winbind: added count argument to wb_sids2xids_recv()Andrew Tridgell4-4/+7
this allows callers to know how many SIDs were mapped Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s3: Fix a debug messageVolker Lendecke1-2/+2
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Sep 8 15:08:43 CEST 2011 on sn-devel-104
2011-09-08s3: Fix a typoVolker Lendecke1-1/+1
2011-09-08build: Add duplicate symbol checking as part of make testAndrew Bartlett5-10/+32
This ensures we do not get duplicate symbols again, when run as ./configure.developer on non-build farm machines. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 13:37:40 CEST 2011 on sn-devel-104
2011-09-08build: netapi does not depend on TOKEN_UTILAndrew Bartlett1-1/+1
This means we avoid dupliate symbols between libgpo and netapi. Andrew Bartlett
2011-09-08build: make LIBWBCLIENT_OLD and auth_unix_token librariesAndrew Bartlett2-9/+11
This assists with avoiding duplicate symbols. Andrew Bartlett
2011-09-08librpc: put NDR_NTPRINTING into ndr-samba grouping libraryAndrew Bartlett1-1/+1
This assists with avoiding duplicate symobls now that ntprinting_migrate is a library. Andrew Bartlett
2011-09-08libgpo: call security_token_has_sid() directlyAndrew Bartlett1-2/+2
2011-09-08s3:libsmb: pass CLI_FULL_CONNECTION_* flags via cli_connect_nb()Stefan Metzmacher14-51/+65
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Sep 8 10:21:50 CEST 2011 on sn-devel-104
2011-09-08s3:libsmb: pass CLI_FULL_CONNECTION_* flags to cli_state_create()Stefan Metzmacher4-6/+30
metze
2011-09-08lib/replace: include <sys/uio.h> in "system/filesys.h" in order to have ↵Stefan Metzmacher1-0/+4
struct iovec This is needed on some platforms, e.g. NetBSD5. metze
2011-09-08Revert "Part 4 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid ↵Jeremy Allison1-11/+8
for set (Invalid argument)" This belongs as part of the bugfix for bug #8443 - Default user entry is set to minimal permissions on incoming ACL change with no user specified. Not as part of #7509. This reverts commit 2a1453e2318af77a79180f3137f8a8d3f1240233. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Sep 8 08:50:12 CEST 2011 on sn-devel-104
2011-09-08s4-cracknames: use consistent search for crossRef objectsAndrew Tridgell1-2/+4
This matches the search in other places Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Sep 8 05:02:54 CEST 2011 on sn-devel-104
2011-09-08pidl: adjust expected output for new flag checkingAndrew Tridgell1-2/+4
2011-09-08s4-dsdb: prevent crash on bad DN in construct_parent_guid()Andrew Tridgell1-0/+3
this was found by a flakey test in autobuild
2011-09-08torture-drs: fixed NDR tests for DRS blobsAndrew Tridgell1-2/+40
this also adds new tests for trustAuthInOutBlob blobs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: fixed NDR tests for NTLMSSP blobsAndrew Tridgell1-4/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: fixed NDR tests for NBT blobsAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: fixed NDR tests for DFS blobsAndrew Tridgell1-3/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: added support for testing push functionsAndrew Tridgell2-25/+52
this allows us to check the symmetry of pull/push functions in NDR tests Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08pidl: added checking of NDR flags in generated codeAndrew Tridgell1-0/+8
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08libndr: add checking to all pull/push functions of base typesAndrew Tridgell1-0/+34
this checks that the passed in ndr_flags are valid Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08libndr: moved the NDR_* flags to have less overlapAndrew Tridgell1-8/+36
We have 3 different types of flags values in our NDR layer. We've recently found bugs where these types of flags have been mixed up, especially by people adding hand written ndr code for tricky structures. We previously got away with this because (for example) NDR_SCALARS and NDR_IN had the same value, so mixing up the two concepts sometimes worked. Unfortunately it also led to bugs where we didn't do what was expected, such as in our smbtorture ndr test suite, where passing a ndr_flags value of zero led to only checking that two empty structures were equal. This changes the values of the NDR_IN|NDR_OUT and NDR_SCALARS|NDR_BUFFERS values to be in different bit ranges, and adds macros for checking the validity of passed in flags. A followup patch modifies the ndr calls to use these macros, and pidl to generate them. This should catch misuse of the APIs. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08lib: added base64_decode_data_blob_talloc()Andrew Tridgell2-2/+19
its nice to be able to allocate on other than NULL Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-dsdb: fixed compiler warningAndrew Tridgell1-1/+1
sid can be const Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08Tidy up previous patch for bug #8442 - NFSv4 DENY ACLs always include ↵Jeremy Allison1-5/+4
SYNCHRONIZE flag - blocking renames. aceType is an enum field, not a bitmask. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Sep 8 03:34:39 CEST 2011 on sn-devel-104
2011-09-08s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs2-0/+4
This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
2011-09-08s4-provision: Make DNS entries consistent with dns_update scriptAmitay Isaacs1-4/+4
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Reworked DNS provisioning to support AD DNS schemaAmitay Isaacs1-114/+435
This changes configure DNS partitions used by AD DNS and populate with relevant entries. This has an advantage that Windows can replicate these partitions and set up dns server using them. In addition, these partitions are used by bind9_dlz module to query zone information directly and do not need to create text database for dynamic zones. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs5-3/+129
This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Add DNS backend option to provisionAmitay Isaacs2-4/+10
This option is introduced temporarily to test bind9 backend with and without dlz_dlopen module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: exit is not imported directed, use sys.exitAmitay Isaacs1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Extract dns account creation as separate ldifAmitay Isaacs2-92/+12
MicrosoftDNS container and LDAP entries for root servers will be added by sambadns.py directly. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08samba-tool: Avoid use of "except .. as" construction introduced in python2.6.Jelmer Vernooij1-2/+3
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Sep 8 00:34:22 CEST 2011 on sn-devel-104
2011-09-07Fix bug #8442 - NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking ↵Ira Cooper1-1/+7
renames. Thanks to Youzhong Yang for discovering this issue. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Sep 7 22:56:06 CEST 2011 on sn-devel-104