Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-27 | tdb: TDB_INCOMPATIBLE_HASH, to allow safe changing of default hash. | Rusty Russell | 6 | -6/+23 | |
This flag to tdb_open/tdb_open_ex effects creation of a new database: 1) Uses the Jenkins lookup3 hash instead of the old gdbm hash if none is specified, 2) Places a non-zero field in header->rwlocks, so older versions of TDB will refuse to open it. This means that the caller (ie Samba) can set this flag to safely change the hash function. Versions of TDB from this one on will either use the correct hash or refuse to open (if a different hash is specified). Older TDB versions will see the nonzero rwlocks field and refuse to open it under any conditions. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> | |||||
2010-09-27 | tdb: automatically identify Jenkins hash tdbs | Rusty Russell | 1 | -14/+27 | |
If the caller to tdb_open_ex() doesn't specify a hash, and tdb_old_hash doesn't match, try tdb_jenkins_hash. This was Metze's idea: it makes life simpler, especially with the upcoming TDB_INCOMPATIBLE_HASH flag. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> | |||||
2010-09-27 | tdb: add Bob Jenkins lookup3 hash as helper hash. | Rusty Russell | 7 | -18/+447 | |
This is a better hash than the default: shipping it with tdb makes it easy for callers to use it as the hash by passing it to tdb_open_ex(). This version taken from CCAN and modified, which took it from http://www.burtleburtle.net/bob/c/lookup3.c. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> | |||||
2010-09-27 | s3-waf: rework static and shared list handling a little. | Günther Deschner | 1 | -17/+20 | |
Guenther | |||||
2010-09-27 | waf: add delimiter argument to TO_LIST. | Günther Deschner | 1 | -2/+2 | |
Guenther | |||||
2010-09-27 | s3-waf: add missing IDMAP modules. | Günther Deschner | 2 | -1/+18 | |
Guenther | |||||
2010-09-27 | s3-waf: rework CLDAP and LIBCLI_LDAP subsystems. | Günther Deschner | 2 | -9/+18 | |
Guenther | |||||
2010-09-27 | s3-waf: move gpext subsystem to libgpo/gpext/wscript_build. | Günther Deschner | 2 | -35/+36 | |
Guenther | |||||
2010-09-27 | s3-waf: move perfcount subsystem to modules/wscript_build. | Günther Deschner | 2 | -23/+23 | |
Guenther | |||||
2010-09-27 | s3-waf: move charset subsystem to modules/wscript_build. | Günther Deschner | 2 | -41/+43 | |
Guenther | |||||
2010-09-27 | s3-waf: move idmap subsystem to winbindd/wscript_build. | Günther Deschner | 2 | -77/+77 | |
Guenther | |||||
2010-09-27 | s3-waf: move pdb subsystem to pdb/wscript_build. | Günther Deschner | 2 | -50/+51 | |
Guenther | |||||
2010-09-27 | s3-waf: move auth subsystem to auth/wscript_build. | Günther Deschner | 2 | -83/+85 | |
Guenther | |||||
2010-09-27 | s3-waf: support --with-acl-support, at least for posix acls. | Günther Deschner | 2 | -22/+55 | |
Guenther | |||||
2010-09-27 | s3-waf: move VFS subsystem to modules/wscript_build. | Günther Deschner | 2 | -389/+403 | |
Guenther | |||||
2010-09-27 | s3-waf: add some module specific functions for s3 waf build. | Günther Deschner | 2 | -0/+23 | |
Thanks to Kai. Guenther | |||||
2010-09-27 | s3-waf: convert VFS into a subsystem. | Günther Deschner | 1 | -0/+340 | |
Guenther | |||||
2010-09-27 | s3-waf: convert GPEXT into a subsystem. | Günther Deschner | 1 | -0/+27 | |
Guenther | |||||
2010-09-27 | s3-waf: convert PERFCOUNT into a subsystem. | Günther Deschner | 1 | -0/+20 | |
Guenther | |||||
2010-09-27 | s3-waf: convert CHARSET into a subsystem. | Günther Deschner | 1 | -0/+34 | |
Guenther | |||||
2010-09-27 | s3-waf: convert IDMAP into subsystem. | Günther Deschner | 1 | -0/+55 | |
Guenther | |||||
2010-09-27 | s3-waf: convert PDB into subsystem. | Günther Deschner | 1 | -0/+41 | |
Guenther | |||||
2010-09-27 | s3-waf: convert AUTH into subsystem. | Günther Deschner | 1 | -0/+59 | |
Guenther | |||||
2010-09-26 | s4-ldbmodules: Added new module aclread to handle access checks on LDAP search | Nadezhda Ivanova | 4 | -0/+327 | |
It is currently enabled only if the request comes from the LDAP server, and is disabled by default. Use acl:search=true in smb.conf to enable it. It filters out all objects the user is not allowed to see, and all attributes the user does not have RP on. Extended access not supported yet. | |||||
2010-09-26 | s4-tests: Added tests for search checks on attributes | Nadezhda Ivanova | 2 | -5/+102 | |
The ACL reach tests are in the knowfail because aclread module is not enabled by default | |||||
2010-09-26 | s4-tests: Removed search tests with anonymous credentials as they fail ↵ | Nadezhda Ivanova | 2 | -4/+4 | |
againts Windows These tests will fail in make test as well if the acl_read module is enabled. | |||||
2010-09-26 | s4-dsdb: Added a function to check access on a particular object by its guid | Nadezhda Ivanova | 1 | -0/+37 | |
Similar to dsdb_check_access_on_dn, only it searches by guid. | |||||
2010-09-26 | s4-dsdb: A helper to determine if an attribute is part of the search filter | Nadezhda Ivanova | 1 | -0/+46 | |
2010-09-26 | s4-dsdb: Moved some helper functions to a separate file | Nadezhda Ivanova | 5 | -222/+260 | |
We need these to be accessible to the aclread module as well. | |||||
2010-09-26 | s4-ldap: Added a control to apply the access checks on read via LDAP | Nadezhda Ivanova | 3 | -0/+6 | |
2010-09-26 | autobuild: use killbysubdir if available | Andrew Tridgell | 1 | -2/+4 | |
this will reduce the spurious test output while processes are being killed | |||||
2010-09-26 | autobuild: exit immediately if no changes from master | Andrew Tridgell | 1 | -1/+9 | |
we don't need to test master in autobuild | |||||
2010-09-26 | s3-waf: convert LIBGPO into a subsystem. | Günther Deschner | 1 | -2/+5 | |
Guenther | |||||
2010-09-26 | s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems. | Günther Deschner | 1 | -11/+19 | |
Guenther | |||||
2010-09-26 | s3-vfs: fix the build of nfs4_acls.c | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2010-09-26 | s3-waf: Link smbd against RPCECHO. | Andreas Schneider | 1 | -1/+1 | |
2010-09-26 | s3: Remove talloc_autofree_context() from nametouid() | Volker Lendecke | 1 | -1/+1 | |
pass is freed a few lines down | |||||
2010-09-26 | s3: Remove talloc_autofree_context() from guest_user_info() | Volker Lendecke | 1 | -1/+2 | |
pwd is freed a few lines down | |||||
2010-09-26 | s3: Remove talloc_autofree_context() from getpwnam_alloc() | Volker Lendecke | 1 | -1/+1 | |
This is given to the memcache a few lines down | |||||
2010-09-26 | s3: Remove talloc_autofree_context() from notify_internal_parent_init() | Volker Lendecke | 3 | -6/+5 | |
2010-09-26 | Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request. | Jeremy Allison | 6 | -57/+134 | |
Found by the CodeNomicon test suites at the SNIA plugfest. http://www.codenomicon.com/ If an invalid NetBIOS session request is received the code in name_len() in libsmb/nmblib.c can hit an assert. Re-write name_len() and name_extract() to use "buf/len" pairs and always limit reads. Jeremy. | |||||
2010-09-26 | s4:schannel: handle move flag combinations in the server | Stefan Metzmacher | 1 | -13/+23 | |
This fixes some testsuites in the CIFS plugfest. metze | |||||
2010-09-26 | s4-auth: fixed the SID list for DCs in the PAC | Andrew Tridgell | 4 | -29/+16 | |
the S-1-5-9 SID is added in the PAC by the KDC, not on the server that receives the PAC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Sep 26 07:09:08 UTC 2010 on sn-devel-104 | |||||
2010-09-26 | autobuild: fixed detection of master changes | Andrew Tridgell | 1 | -3/+4 | |
2010-09-26 | s3-selftest: added samba3.posix_s3.rap.printing as a knownfail | Andrew Tridgell | 1 | -0/+1 | |
this fails intermittently on sn-devel, Günther suggests adding this to knownfail for now | |||||
2010-09-26 | idl-pac: add a decoder for the pac info ctr | Andrew Tridgell | 1 | -0/+4 | |
Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-26 | s4-drs: use the system sam_ctx for updaterefs | Andrew Tridgell | 1 | -8/+9 | |
this is needed for RODC clients calling updaterefs | |||||
2010-09-26 | s4-spn: don't try to do SPN updates as a RODC | Andrew Tridgell | 1 | -0/+4 | |
we don't have the permissions to do it | |||||
2010-09-26 | libcli/ldap: let ldap_full_packet() use asn1_peek_tag_needed_size() | Stefan Metzmacher | 1 | -1/+1 | |
This allows us to read a full packet without read byte after byte or possible read to much. metze | |||||
2010-09-26 | lib/util/asn1: add asn1_peek_tag_needed_size() and asn1_peek_full_tag() | Stefan Metzmacher | 2 | -0/+85 | |
We need a way to ask for the length of a tag without having the full buffer yet. metze |