summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-07-02decrypt all objects in a DRS record, not just the first oneAndrew Tridgell1-2/+5
We found this as an object came across from w2k3 with zero values, which caused a segv when we tried to decrypt the first value
2009-07-02change talloc to 2.0.0Andrew Tridgell3-3/+3
This is needed to prevent samba3 and samba4 from using an ABI incompatible system version of talloc See ongoing discussion on the samba-technical mailing list
2009-07-02Changed ldb.ERR_NO_SUCH_OBJECT to LDB_ERR_NO_SUCH_OBJECT.Andrew Tridgell1-5/+5
The LDB_ERR_NO_SUCH_OBJECT varient is not a defined variable. This should improve error handling in our python code on some systems. Unfortunately it still doesn't work on mine. I need to trap Jelmer somewhere where he can't escape some day and force him to divulge the deep druid secrets of python exception handling ....
2009-07-02fixed the pull of drs schema elementsAndrew Tridgell3-33/+108
The previous code incorrectly assumed that attributes such as subClassOf come over the wire as strings. In fact they come over as 32 bit integers which refer to goversIDs. We have to post-process these as it sometimes happens that a governsID comes over the wire before the record that defines what it means.
2009-07-02the settings structure needs to be initialisedAndrew Tridgell1-0/+1
2009-07-02LDB_ERR_INVALID_DN_SYNTAX doesn't exist ...Andrew Tridgell1-1/+1
The correct name is ldb.ERR_INVALID_DN_SYNTAX
2009-07-02s4:param use talloc_unlink() to free iconv context holding referencesAndrew Bartlett1-1/+1
2009-07-02[SAMBA 4 directory] Changes "forceLogoff" and corrects the "subRefs"Matthias Dieter Wallnöfer1-2/+4
- This changes the attribute "forceLogoff" to its' default values according to Windows Server 2003 R2 - Also this corrects the "subRefs" attribute of the base-DN which only refers to direct child partitions (and therefore not to the complete transitive closure)
2009-07-01Ensure we don't use delayed writes on POSIX opened files.Jeremy Allison2-0/+15
Don't remove pending writetime changes if no time changes are sent in UNIX_BASIC infolevel. Jeremy
2009-07-01Fix bug #6520 time stamps - e.g. last mod time is not preserved when "unix ↵Jeremy Allison1-3/+31
extensions=yes" are set - and using latest cifs vfs client Cancel out any pending "sticky" writes or "last write" changes when doing a UNIX info level set. Jeremy.
2009-07-01s3:util: let parent_dirname() correctly return toplevel filenamesStefan Metzmacher1-1/+1
metze
2009-07-01s3:onefs_open: remove unused variable passed to parent_dirname()Stefan Metzmacher1-2/+1
metze
2009-07-01s3:smbd: remove unused variables passed to parent_dirname()Stefan Metzmacher2-5/+3
metze
2009-07-01s3:build: remove the libgpo objects upon "make clean"Michael Adam1-1/+2
Michael
2009-07-01s3:build: remove ../libcli/nbt/tools/nmblookup.o and friends in make cleanMichael Adam1-1/+1
Michael
2009-07-01lib/util: fix order of includes in tevent_ntstatus.cMichael Adam1-1/+1
replace.h needs to be included first. Michael
2009-07-01fixed the talloc testsuite for the recent changesAndrew Tridgell1-6/+10
2009-07-01a talloc_realloc() to zero size needs to use an unambiguous freeAndrew Tridgell1-1/+1
2009-07-01s3/docs: Fix typo.Matt Kraai1-1/+1
This fixes bug #6519.
2009-07-01removed a generated fileAndrew Tridgell1-74/+0
2009-07-01use a talloc_reparent in a very ugly wayAndrew Tridgell1-2/+11
this works around some terrible use of talloc in the libnet code
2009-07-01use the new talloc_reparent in two placesAndrew Tridgell2-2/+2
2009-07-01changes to remove the ambiguity in talloc_free() and talloc_steal() Andrew Tridgell2-26/+109
These changes follow from the discussions on samba-technical. The changes are in several parts, and stem from the inherent ambiguity that was in talloc_free() and talloc_steal() when the pointer that is being changes has more than one parent, via references. The changes are: 1) when you call talloc_free() on a pointer with more than one parent the free will fail, and talloc will log an error to stderr like this: ERROR: talloc_free with references at some/foo.c:123 reference at other/bar.c:201 reference at other/foobar.c:641 2) Similarly, when you call talloc_steal() on a pointer with more than one parent, the steal will fail and talloc will log an error to stderr like this: ERROR: talloc_steal with references at some/foo.c:123 reference at other/bar.c:201 3) A new function talloc_reparent() has been added to change a parent in a controlled fashion. You need to supply both the old parent and the new parent. It handles the case whether either the old parent was a normal parent or a reference The use of stderr in the logging is ugly (and potentially dangerous), and will be removed in a future patch. We'll need to add a debug registration function to talloc.
2009-07-01gensec_start now steals the auth_contextAndrew Tridgell1-1/+3
2009-07-01A rather strange varient of talloc_unlinkAndrew Tridgell1-1/+1
A dcerpc request may have a reference from a still completing async callback, but we now consider the request to be complete. We want to lose the main parent, leaving just the reference, if any.
2009-07-01another case that should use py_talloc_referenceAndrew Tridgell1-1/+1
2009-07-01use py_talloc_reference instead of py_talloc_importAndrew Tridgell1-1/+1
This is one of the few cases where we want the object to be owned by both the python object and C code
2009-07-01py_talloc_import now uses a steal, so this free is incorrectAndrew Tridgell1-1/+0
2009-07-01fixed use of reference in pytallocAndrew Tridgell2-3/+24
The previous code caused memory leaks, and also caused situations where talloc_free could be called on pointers with multiple parents The new approach is to have two functions: py_talloc_import : steals the pointer, so it becomes wholly owned by the python object py_talloc_reference: uses a reference, so it is owned by both python and C
2009-07-01use a talloc_unlink() as ops may have a referenceAndrew Tridgell1-1/+1
2009-07-01fixed the reference to the global_schemaAndrew Tridgell1-2/+3
2009-07-01removed a redundent talloc_stealAndrew Tridgell1-2/+0
2009-07-01fixed the use of talloc_steal in ntlmssp_server Andrew Tridgell1-3/+2
The previous use of talloc_steal could cause a steal of a pointer that had references. This ensures that doesn't happen
2009-07-01fixed rpc smb code to not reply on talloc_free being a function pointerAndrew Tridgell2-2/+13
The upcoming talloc_free/talloc_reference changes change talloc_free to be a macro. These two bits of code relied on it being a function pointer
2009-07-01[SAMBA 4 directory] Corrects the "systemFlags" attributesMatthias Dieter Wallnöfer7-32/+39
Set the values like Windows Server 2003 R2.
2009-07-01[SAMBA 4 directory] Adds the complete "objectclass path" to our self-created ↵Matthias Dieter Wallnöfer1-0/+4
DC object Found after some comparisons against Windows Server 2003 R2.
2009-07-01[SAMBA 4 directory] Adds the object version and "systemFlags" attribute to ↵Matthias Dieter Wallnöfer1-0/+2
the display specifiers The object version showed up in the Windows 2003 Server R2 AD. The "systemFlags" attribute has been set to the right value.
2009-06-30s3 docs: Add documentation for 'kerberos method' and 'dedicated keytab file' ↵Tim Prouty2-0/+54
parameters
2009-06-30Fix bug #6496 - MS-DFS: cannot follow multibyte char link name.SATOH Fumiyasu2-15/+39
consumed_ucs is the number of bytes of the UCS2 path consumed not counting any terminating null. We need to convert back to unix charset and count again to get the number of bytes consumed from the incoming path.
2009-06-30s3-netlogon: remove unneeded fstrings from netlogon server.Günther Deschner1-22/+12
Guenther
2009-06-30umount.cifs: don't build it by defaultJeff Layton2-9/+47
Now that the sanity checks for mount.cifs default to matching the behavior of /bin/mount, then there is virtually no need for umount.cifs. The only exception is when someone enables the loose setuid behavior in mount.cifs. If an unprivileged user mounts a share that isn't in /etc/fstab, then /bin/mount won't allow that user to unmount it. In that situation, umount.cifs will be necessary to allow unmounting the share. Signed-off-by: Jeff Layton <jlayton@samba.org> Acked-by: Steve French <smfrench@us.ibm.com>
2009-06-30Fix bug #6431 - local groups from 3.0 setups no longer found.Volker Lendecke1-8/+8
Search for groups without group suffix, group suffix is only used for new entries.
2009-06-30s3-spoolss: Bug #6512. Fix support for enumerating user forms.Günther Deschner1-5/+5
Found while testing Xerox WorkCentre 133 PCL driver, now also tested with torture test. Guenther
2009-06-30s4-smbtorture: Test for newly added form with enum call in RPC-SPOOLSS.Günther Deschner1-0/+45
Guenther
2009-06-30s4-smbtorture: remove trailing whitespace from RPC-SPOOLSS.Günther Deschner1-98/+98
Guenther
2009-06-30Rework the kerberos-notes.txt in order and formatDon Davis1-0/+803
This reworks the notes file to be less stream-of-consciousness and more task for porting, with a very particular focus on a potential port of Samba4 to use MIT Kerberos. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-06-30s4:ldb Allow rootdse module to build without ldb_private.hAndrew Bartlett3-2/+4
It seems quite reasonable to allow modules to re-initialise the set of cached DNs on the ldb context. Andrew Bartlett
2009-06-30s4: dsdb Avoid using the internal ldb_private.h headerAndrew Bartlett5-118/+122
This job is not complete (the partition module remains a unfinished task), but now we do use the private ldb headers much less. Andrew Bartlett
2009-06-30s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett5-24/+35
The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
2009-06-30s4:kdc Only get the lp_ctx once for a LDB_fetch()Andrew Bartlett1-11/+18