summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-07-11s3:smbd: check the share level access mask in smbd_calculate_access_mask()Stefan Metzmacher1-0/+17
I think we should reject invalid access early, before we might create new files. Also smbd_check_open_rights() is only called if the file existed. metze
2011-07-11s3:smbd: make smbd_calculate_access_mask() non-staticStefan Metzmacher2-14/+20
metze
2011-07-11s3:smbd/msdfs: let create_conn_struct() check the share security descriptorStefan Metzmacher1-0/+30
metze
2011-07-11s3:winbindd_cm: make use of cli->src_ss instead of calling getsockname()Stefan Metzmacher1-2/+8
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jul 11 19:31:14 CEST 2011 on sn-devel-104
2011-07-11s3:winbindd_cm: make use of cli->dest_ss instead calling getpeername()Stefan Metzmacher1-1/+7
metze
2011-07-11s3:winbindd_cm: make use of cli_state_disconnect()Stefan Metzmacher1-4/+2
metze
2011-07-11s3:winbindd_cm: make use of cli_state_is_connected()Stefan Metzmacher1-9/+6
metze
2011-07-11s3:auth_server: use cli_echo() to check if the server is aliveStefan Metzmacher1-5/+10
This works over port 139 and also 445. send_keepalive() would only work on port 139. metze
2011-07-11s3:auth_server: make use of cli_state_is_connected()Stefan Metzmacher1-3/+3
metze
2011-07-11s3:client: simplify readline_callback() to only use cli_echo()Stefan Metzmacher1-54/+9
cli_echo() already swallows NBT keepalive messages, so there's no need to filter them in the 'smbclient' layer. metze
2011-07-11s3:libsmbclient: use cli_state_is_connected() in SMBC_check_server()Stefan Metzmacher1-4/+4
metze
2011-07-11s3:libsmbclient: don't log the lowlevel fd in smbc_free_context()Stefan Metzmacher1-2/+2
metze
2011-07-11s3:libsmb: add cli_state_disconnect()Stefan Metzmacher2-0/+8
metze
2011-07-11s3:libsmb: make use of cli_state_is_connected()Stefan Metzmacher1-13/+9
metze
2011-07-11s3:libsmb: remove unused cli_set_port()Stefan Metzmacher4-13/+0
metze
2011-07-11s3:libsmb: also remember the local socket address after connectStefan Metzmacher2-0/+9
metze
2011-07-11s3:smb2cli_base: add my copyrightStefan Metzmacher1-0/+1
metze
2011-07-11s3-torture: run_locktest2(): replace check_error() with check_both_error()Björn Baumbach1-10/+14
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-07-11s3-torture: run_locktest2(): replace cli_lock() with cli_lock32()Björn Baumbach1-20/+35
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-07-11s3-torture: run_locktest1(): replace cli_lock() with cli_lock32()Björn Baumbach1-17/+25
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-07-11s3-torture: locktest2: replace cli_lock() with cli_lock32()Björn Baumbach1-1/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-07-11s3-torture: let wait_lock() use cli_lock32() instead of cli_lock()Björn Baumbach1-3/+13
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-07-11s3-libsmb: let cli_lock64 return NTSTATUS instead of boolBjörn Baumbach3-16/+15
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jul 11 12:48:38 CEST 2011 on sn-devel-104
2011-07-11s3-libsmb: introduce cli_lock32()Björn Baumbach2-0/+18
Same like cli_lock() but return NTSTATUS instead of bool Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-07-11dbcheck: use get_lDAPDisplayName_by_attid()Andrew Tridgell1-11/+3
this is better than doing a schema search inside the dbcheck code Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Jul 11 07:43:18 CEST 2011 on sn-devel-104
2011-07-11dsdb: added get_lDAPDisplayName_by_attidAndrew Tridgell2-0/+37
this allows conversion from a DRS attribute ID to a LDAP display name Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-07-11dbcheck: improved error checking in fixup of missing metdataAndrew Tridgell1-26/+24
when fixing missing attributes in replPropertyMetaData, allow user to confirm changes, and check for exceptions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-provision: use samba.unix2nttime() instead of hard coding NTTIME offsetsAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-drs: do not return links pointed to unexistant objectsMatthieu Patou1-0/+24
When an object is deleted, link pointed to it are marked as inactive. When the same object is purged we do not remmove the link pointed to it (we can't know them) so they stay in the database, it turns to be a problem for Windows 2008. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dirsync: do not return linked attribute if the target object is no moreMatthieu Patou1-0/+29
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: allow objectsid to be specified in a modification operationMatthieu Patou1-3/+5
if we have the provision control, it's used by dbcheck Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-samba-tool: dbcheck, check and fix broken metadataMatthieu Patou1-0/+77
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-python: Add functions to get linkid and systemflags of an attributeMatthieu Patou2-0/+76
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: if the provision control is specified, update replication metadata ↵Matthieu Patou1-1/+7
even if the data hasn't change Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11upgradeprovision: reduce the number of attribute that we skipMatthieu Patou1-2/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-provision: fix the value of creation timestamp to be a MS timestampMatthieu Patou1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: when replacing linked attribute take always the new dn as the old ↵Matthieu Patou1-1/+1
dn might be broken The usual use case is that you have a not complete linked attribute (ie. without the SID) if we keep using the old dn, then the SID will never be added. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11s4-dsdb: check for single valued attribute in repl_meta_data moduleMatthieu Patou1-0/+11
This is needed because we can have more than 1 value in a single valued attribute as we store also deleted values. So we do the check in repl_meta_data and then indicate LDB to do the check. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-11dbcheck: check all objects, including deleted objectsAndrew Tridgell2-17/+18
this makes dbcheck search over all objects, deleted or not. This matters because when another DC replicates from this DC it replicates the deleted objects as well, so invalid attributes in deleted objects can cause problems on the new DC (for example, windows can get stuck or even crash during the replication) Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-dsdb: deleted objects are expected to be missing mandatory attributesAndrew Tridgell1-1/+2
the objectclass_attrs validation that an object contains all mandatory attributes is incorrect for deleted objects, as they get stripped of some mandatory attributes when deleted (for example, objectCategory gets stripped) Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11s4-dsdb: fixed crash bug in extended_dn_inAndrew Tridgell1-2/+4
when extended_dn_in fails to resolve a GUID extended DN component, the debug code assumed that it was a search operation, and accessed ac->req->op.search.base, which is not valid for non-search DN expansions. Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11dbcheck: added confirm_all support for remaining checksAndrew Tridgell1-5/+10
this allows the user to choose all/none for all the remaining database checks Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-11dbcheck: use specified DB schema for non-LDAP URLsAndrew Tridgell1-2/+9
when connecting to a local database with -H we can use that databases schema Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
2011-07-10socket_wrapper: make sure interfaces are in the valid range on bind()Stefan Metzmacher1-0/+5
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Jul 10 18:24:14 CEST 2011 on sn-devel-104
2011-07-10s4:lib/socket: iface_list_wildcard() should only return "::" if we have ipv6 ↵Stefan Metzmacher1-1/+13
interfaces If glibc has IPv6 support, but it's not enabled in the running kernel we should not try to listen on "::". metze
2011-07-10s3:smb2cli_tcon: use tevent_req_oom()Stefan Metzmacher1-1/+1
metze
2011-07-10s3: Fix Coverity ID 2587,2588: CHECKED_RETURNVolker Lendecke2-2/+2
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Jul 10 10:36:11 CEST 2011 on sn-devel-104
2011-07-09s3:smb2cli_base: ask for the next response if there're still pending requestsStefan Metzmacher1-1/+21
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Jul 9 13:55:04 CEST 2011 on sn-devel-104
2011-07-09s3:smb2cli_base: make use of tevent_req_defer_callback()Stefan Metzmacher1-28/+64
In order to notify requests of transport layer errors, we need to defer the triggering of the callbacks, otherwise we may crash, if one of the callbacks destroys the cli_state. metze
2011-07-09s3:smb2cli_base: fix memory hierachy in smb2cli_req_recv()Stefan Metzmacher4-27/+44
We need to use talloc_reference() if there're more than one response, but we use it in a way that the caller can't call talloc_free() or talloc_unlink() on it. metze