summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2003-09-10Fix a nasty mess, and also bug #296. passdb/pdb_ldap.c was not convertingJeremy Allison4-256/+288
to/from utf8 for some calls. The libads code gets this right. Wonder why the passdb code doesn't use it ? Jeremy. (This used to be commit 910d21d3164c2c64773031fddaad35ea88e72a04)
2003-09-10Fix for bug #273 - smbd crash on machine account change.Jeremy Allison1-10/+7
Someone only half changed the code to use dc_name instead of remote machine... Found via back trace from Dariush Forouher <dariush@forouher.de>. Jeremy. (This used to be commit 963b24ac1a721a8b0d348b578f25b1d8cb7e2124)
2003-09-10Fix stupid typo bug causing CPU spin. Spotted by Markus Ungermann ↵Jeremy Allison1-0/+1
<ungermann@elzet80.de> Jeremy. (This used to be commit c5ed59b37be1bf779e0d0e61c31227b520430afd)
2003-09-10Back out --with-good-getgrouplist patchAlexander Bokovoy1-21/+2
(This used to be commit 424b13823b666c122f43d63098cec3e54b4fa353)
2003-09-10Now that CAN-2003-0689 is published officially, we need to make possibleAlexander Bokovoy1-2/+21
to build on systems with fixed getgrouplist() in GNU libc < 2.3.2. Unfortunately, we can't detect correctness of getgrouplist() functioning in portable way so this is left up to developer/packager. This patch adds --with-good-getgrouplist[=no] switch to configure which packagers on Linux platforms could use to specify in their own builds if they now that glibc on their platform is fixed w.r.t CAN-2003-0689. By default we still think that glibc is vulnerable and perform our version check. ** This patch does not change default behaviour in Samba 3.0 -- by default we are not vulnerable on glibc as we are not using getgrouplist() See http://www.securityfocus.com/bid/8477 for vulnerability description. Right now there are following Linux vendors released glibc updates for CAN-2003-0689: RedHat -- https://rhn.redhat.com/errata/RHSA-2003-249.html ALTLinux -- http://www.altlinux.com/index.php?module=sisyphus&package=glibc (This used to be commit e53622c114e0368515c50b357567fcdd0b95979e)
2003-09-10Fix error return path memory leaks in vampire code for creating users.Tim Potter1-3/+8
Display an error if we can't create a posix account for the user (e.g no add user/machine script was specified; bug #323). (This used to be commit 0c35ba2cd65ff64c5db2b20d5528a0d486cba51e)
2003-09-10Use opt_target_workgroup instead of lp_workgroup() in vampire code soTim Potter1-2/+2
we can override the value in smb.conf with the -w option. Migrating accounts from another domain can now be done like: # bin/net join bdc -w nt4dom -Uadministrator%password # bin/net rpc vampire -w nt4dom -U administrator%password (This used to be commit d7bd3c1efbd02a7ca01ad9a4b242ea4cc4a63c1f)
2003-09-10Formatting fixups for help output.Tim Potter1-2/+2
(This used to be commit c030d1401950b6efcbdf30ad899c25a61efb1814)
2003-09-10Remove tags file for distclean.Tim Potter1-1/+1
(This used to be commit c972fac195fd9280ab2a0da28b8ed11aaacd3bff)
2003-09-10Fix mb bug in fast path code. strlen_w() returns number of *characters*Jeremy Allison1-3/+3
not number of bytes. Reproduce this by trying to rename the file named : sibréseau -> sibréseaU from Windows 2000 explorer. Jeremy. (This used to be commit 035f59599514491609078ac0fe5804278c43a9b3)
2003-09-10fix some typosGerald Carter1-3/+3
(This used to be commit 6d46fcdaf037a3dd42ea2883f9c518f72bb9d8a8)
2003-09-10small updates to parameter sectionGerald Carter1-4/+5
(This used to be commit aa6751861115d4caa309b1f486c186b47ff06e25)
2003-09-10remove references to 'strip dot'Gerald Carter2-16/+0
(This used to be commit 5c0c9d68b44f867bf6c2b24b9fd9ba2408b9f83c)
2003-09-09syncing filesGerald Carter8-16/+0
(This used to be commit 88725350d248fe017b77c7609544888ba40b7995)
2003-09-09removing unneeded filesGerald Carter2-353/+0
(This used to be commit 40795992b8d8082bc164978ab8d97c326c012367)
2003-09-09bumping new version to CVS 3.01pre1; optmistic about RC3Gerald Carter1-3/+3
(This used to be commit fb69ca974db9aca4aa88952f7872369ce6274e8b)
2003-09-08Don't double-increment p in hash calculation. Found by valgrind.Jeremy Allison1-1/+1
Jeremy. (This used to be commit 514d9361c7be8cb8ef1a1309773baab1d982eea6)
2003-09-08Fix valgrind-found read of uninit variable (ensure length is right).Jeremy Allison1-3/+3
Jeremy. (This used to be commit 6fc0e529f70253244628017a372257e8dc053294)
2003-09-08Tidy up some formatting. Get ready for allowing bad password lockout. (basedJeremy Allison2-63/+56
on a patch posted from Richard Renard <rrenard@idealx.com>. Jeremy. (This used to be commit abf54b58e95a949cb883d4485853dc560489c03f)
2003-09-08Protect against core dump if ioctl for print job sends invalid fid. FoundJeremy Allison1-1/+5
by Iskantharajah T <is@tracetec.com.my>. Jeremy. (This used to be commit a9f9dd71da41801c975303a385ff229788c9498a)
2003-09-08Remove inaccurate notation.John Terpstra1-7/+0
(This used to be commit 8e0478fd1afd872acd247e2a74244abd6f12f266)
2003-09-08Fix for incorrect error message - found by Alex Davis <alex14641@yahoo.com>.Jeremy Allison1-2/+2
Jeremy. (This used to be commit 28631ef23f855ce91740fd144e3dc235a3ae7af6)
2003-09-08Bumping up version number of the Debian packages.Eloy Paris1-0/+6
(This used to be commit 65a5b32f8e9eb1ca19ed9444c42d722800bac809)
2003-09-08Whoops, fix type in comment.Eloy Paris1-1/+1
(This used to be commit a1b2852eaa1c4caa03fe92acbb49a4ff67c790d2)
2003-09-08Fix problem with the python-samba Debian package.Eloy Paris1-1/+6
(This used to be commit fa88ba4315b5ae318fe069c9453f3c77481fca50)
2003-09-08samba 3.0 schema filr netscape DS 5.x from Darren ChewGerald Carter1-74/+35
(This used to be commit 3f97a5ce47bbdd3010dd8e234a7aa5838b524b46)
2003-09-08copy from 3.0 releaseGerald Carter1-4/+5
(This used to be commit 55d712feb0cb3957e08166ecd5e989451ec49e33)
2003-09-08Ok, this should put packaging/Debian/ in sync. with rc3.Eloy Paris2-14/+13
(This used to be commit b5fd2e75ba9bdd3e9225ccf9b86d0f3345073b79)
2003-09-08make sure we substitute basic variables in read/write listGerald Carter1-2/+2
(This used to be commit 52bea54d35e7fb32c7ed7b067c13afe53761affb)
2003-09-08copy WHATSNEW from the release branchGerald Carter1-10/+71
(This used to be commit 977387f4498a6bcf4beac3cd0946dd900d59ca5f)
2003-09-08Sync'ing packaging/Debian/ with the latest files from the officialEloy Paris28-920/+461
Debian packages. This files are in sync. with the Debian packages for 3.0.0rc2. (This used to be commit 7d8d193c05d60ab9b86d52075bb9ec5ad1857903)
2003-09-08fix compile error on HP-UX 10.20Gerald Carter1-0/+5
(This used to be commit 15d53fd53c622de316d0ff41f1b60f0e2c69f908)
2003-09-08fix valgrind errors; don't access cli_state pointer after it has been shutdownGerald Carter1-17/+13
(This used to be commit 02ae82fb3f70dc37e815d8e88bfd31a8c3ff43db)
2003-09-08Set PICFLAG="-fPIC" for gcc under HPUX.Tim Potter1-0/+2
(This used to be commit 7f2533207ee46fa968cf1fd31ac0cd89e1fb0bb1)
2003-09-08Fix for bug #299.Tim Potter1-30/+80
There was some confusion over dynamically allocated lists of pointers (i.e you have to make space for the list of pointers and what they are pointing too) in the memory buffer passed in from libc. Valgrind is much happer now and as a bonus there is no segfault. (This used to be commit 7907c44414acb841a9001e82285790eece73d032)
2003-09-08Rename FOOLIBS to FOO_LIBS to be consistent with the rest of theTim Potter2-60/+60
library variable names. (This used to be commit 9b0b0256a8bb93482fad4032902a4ab6d1e99e23)
2003-09-08Fix for bug #334. We don't unmarshall the trusted domain or secretsTim Potter1-6/+14
info delta correctly and thus crash when doing a net rpc samdump. The easiest thing at the moment it to comment out these functions as they seriously don't correspond with reality (netmon/ethereal) and the data in the containers aren't used anyway. (This used to be commit 695aa39c5d798b112f0a06281b499fcac8a5bf31)
2003-09-08Reformat debug.Tim Potter1-4/+5
(This used to be commit 3aab7a3bc7920b6e479700c176ac7a7b80262f42)
2003-09-08When enumerating dfs shares loop from 0 to lp_numservices() instead ofTim Potter1-1/+1
relying on lp_servicename(n) to return an empty string for invalid service numbers. For some reason it is returning NULL now. Fixes bug 403. (This used to be commit cebb2abd2e946a5f9f2d84a7e8ae82eceecd0274)
2003-09-08Remove another reference to --with-msdfs. Put back accidentallyTim Potter2-10/+9
removed <para> tag remove in previous commit. (This used to be commit 7b40ea3bbd80044cf6dc3ead077cd08d9e3b84ce)
2003-09-08Removed text about --with-msdfs configure option which no longer exists.Tim Potter1-5/+3
(This used to be commit 391ffeb8e02ae85147e4730a1faf79850ff42d57)
2003-09-07Nobody complained on the team-list, so commit it ...Volker Lendecke8-2/+390
This implements some kind of improved AFS support for Samba on Linux with OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile into secrets.tdb with 'net afskey'. If this is done, on each tree connect smbd creates a Kerberos V4 ticket suitable for use by the AFS client and gives it to the kernel via the AFS syscall. This is meant to be very light-weight, so I did not link in a whole lot of libraries to be more platform-independent using the ka_SetToken function call. Volker (This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
2003-09-06Use djb-algorithm string hash - faster than the tdb one we used to use.Jeremy Allison1-8/+7
Jeremy. (This used to be commit f094555ed9d4f72841869e79037d6ff980ebe324)
2003-09-06finish off bug 282. AAdd extra checks for pointers afterGerald Carter1-7/+7
ads_search_XXX() calls. (This used to be commit 74c02e5fbc411d6fd1b13a1e21599da030897efe)
2003-09-06Change some internal interfaces to cause the hash (which is *expensive*)Jeremy Allison1-18/+31
to be calculated less often. No change to external interface. Jeremy. (This used to be commit 155c9ce6663df9963c7563adf78a232d3650b7b5)
2003-09-06fix bug 382: make sure to free and reset the cli_state pointer after ↵Gerald Carter1-0/+6
flushing connections in winbindd_pam_auth[_crap]() (This used to be commit 60c8796edd84249db5419329a0fea4bbc7f9bb98)
2003-09-06address bug #359. Andrew B's patch for implementing clientGerald Carter4-32/+45
portion of NTLMv2 key exchange. Also revert the default for 'client ntlmv2 auth' to no. This caused no ends of grief in different cases. And based on abartlet's mail.... > All I care about at this point is that we use NTLMv2 > in our client code when connecting to a server that > supports it. There is *no* way to tell this. The server can't tell us, because it doesn't know what it's DC supports. The DC can't tell us, because it doesn't know what the trusted DC supports. One DC might be Win2k, and the PDC could be an older NT4. (This used to be commit fe585d49cc3df0d71314ff43d3271d276d7d4503)
2003-09-06revert retry loops in winbindd_ads as abartket points out, weGerald Carter2-314/+153
already have ads_search_retry() for this. However, neither domain_sid() nor sequence_nunber() used this function. So modify them to us ads_do_search_retry() so we can specify the base search DN and scope. (This used to be commit 89f6adf830187d020bf4b35d1a4b2b48c7a075d0)
2003-09-06Only set sids when they're retrurned by the MySQL queryJelmer Vernooij1-2/+2
(This used to be commit 9a603f6f077a2e1ddc41849cca3641421ecbaf11)
2003-09-05Fix problem where stdarg.version would print the program name as smbd.John Terpstra1-2/+2
(This used to be commit 6eaef4b6d286e2731f1e2ac99bdc6911d1296361)