summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-08-14s4: remove REMOVE_MAPPING from wb_samba3_protocolMichael Adam1-2/+0
Michael
2010-08-14s3:winbind: remove the method REMOVE_MAPPING from winbind's APIMichael Adam7-153/+0
Michael
2010-08-14s3:idmap: remove unused idmap_set_mapping().Michael Adam2-18/+0
Michael
2010-08-14s4: remove SET_MAPPING from wb_samba3_protocolMichael Adam1-2/+0
Michael
2010-08-14s3:winbind: remove the method SET_MAPPING from winbind's APIMichael Adam7-146/+0
Michael
2010-08-14libwbclient: unimplement wbcRemoveGidMapping()Michael Adam1-33/+2
Michael
2010-08-14libwbclient: unimplement wbcRemoveUidMapping()Michael Adam1-33/+2
Michael
2010-08-14libwbclient: unimplement wbcSetGidMapping()Michael Adam1-33/+2
Michael
2010-08-14libwbclient: unimplement wbcSetUidMapping()Michael Adam1-33/+2
Michael
2010-08-14s3:idmap: remove unused idmap_set_gid_hwm()Michael Adam2-14/+0
Michael
2010-08-14s3:idmap: remove unused idmap_set_uid_hwm()Michael Adam2-14/+0
Michael
2010-08-14s4: remove SET_HWM and SET_DUAL_HWM from wb_samba3_protocolMichael Adam1-2/+0
Michael
2010-08-14s3:winbind: remove SET_HWM from winbind's API.Michael Adam7-135/+0
2010-08-14libwbclient: unimplement wbcSetGidHwm()Michael Adam1-21/+2
Michael
2010-08-14libwbclient: unimplement wbcSetUidHwm()Michael Adam1-21/+2
Michael
2010-08-14s3:net: rewrite "net idmap restore" using dbwrapMichael Adam1-52/+130
This removes the use of libwbclient from "net idmap". This detects the idmap backend from the current smb.conf and stores the id mapping tables in the corresponding data bases. Currently, only tdb and tdb2 backends are supported. Support for the ldap backend may be implemented later.
2010-08-14s3:net: change "net idmap dump" to use dbwrap instead of direct tdb accessMichael Adam1-15/+17
This way, it will also work in a samba-ctdb cluster.
2010-08-14s3:net sam provision: compose sid before getting uid for GuestMichael Adam1-2/+2
Michael
2010-08-14s3:net sam provision: allocate the uid after composing the sid for AdministratorMichael Adam1-6/+7
Michael
2010-08-14s3:pdb_ldap: move some code in ldapsam_create_dom_group()Michael Adam1-22/+25
to make the flow more similar to ldapsam_create_user(). This prepares for calling winbind_sid_to_gid() instead of winbind_allocate_gid(): we need the group_sid for this... Michael
2010-08-14s3:groupdb: allocate a gid after allocating a rid in pdb_default_create_alias()Michael Adam1-6/+7
Michael
2010-08-14s3:idmap_tdb2: fix a debug messageMichael Adam1-1/+1
2010-08-14s3:test: add a new "valgrindtestenv" target, similar to gdbtestenvMichael Adam1-0/+7
this runs the daemins in xterm under valgrind instead of in gdb
2010-08-14s3:gdbtestenv: also start an xterm with nmbd. and start winbindd before smbd.Michael Adam1-2/+3
2010-08-14s3:gdbtestenv: also set the xterm's window title appropriatelyMichael Adam1-2/+2
2010-08-14s3:gdbtestenv: print the server's name in the icontitle instead of "server"Michael Adam1-2/+2
2010-08-13pidl: fix printing of server side ndr request debug messagesMichael Adam1-2/+2
The macros NDR_PRINT_IN_DEBUG and NDR_PRINT_OUT_DEBUG are made for the client side. For the server side, the NDR_SET_VALUES flag needs to be added for the OUT struct and not for the IN struct, otherwise, the OUT part can print uninitialized data and the IN part may recalculate string lengths illegally.
2010-08-13s3: Fix some error messagesVolker Lendecke3-7/+9
2010-08-13Eliminate any chance of a class of "uninitialized auto variable" errors.Jeremy Allison1-26/+24
Jeremy.
2010-08-14tdb: workaround starvation problem in locking entire database.Rusty Russell4-19/+131
We saw tdb_lockall() take 71 seconds under heavy load; this is because Linux (at least) doesn't prevent new small locks being obtained while we're waiting for a big log. The workaround is to do divide and conquer using non-blocking chainlocks: if we get down to a single chain we block. Using a simple test program where children did "hold lock for 100ms, sleep for 1 second" the time to do tdb_lockall() dropped signifiantly. There are ln(hashsize) locks taken in the contended case, but that's slow anyway. More analysis is given in my blog at http://rusty.ozlabs.org/?p=120 This may also help transactions, though in that case it's the initial read lock which uses this gradual locking routine; the update-to-write-lock code is separate and still tries to update in one go. Even though ABI doesn't change, minor version bumped so behavior change can be easily detected. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2010-08-13s3-selftest: move make test to selftest.Günther Deschner1-6/+6
The old "make test" can be still called as "make oldtest". Guenther
2010-08-13s3-selftest: fix testparm tests as non-root.Günther Deschner2-2/+5
Thanks to Andreas for pointing this out. Guenther
2010-08-13s3-smbd: Publish nt printers.Andreas Schneider2-5/+15
Reloading of the printers requires rpc services up and running! The first call in reload_services will be skipped. Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-smbd: Move rpc services init to smbd parent.Andreas Schneider2-42/+46
The move to the parent makes it possible to use an internal rpc pipe really early and as we migrated serveral parts of samba to rpc function this is required. This should speed up the fork of a smbd a bit cause the rpc services are already running. We still have several problems here which aren't solved. We don't have a dependency tree here. For example we have to make sure that the registry is initialized before we can use the winreg pipe. The spoolss server requires winreg, so we have to start winreg before we can start the spoolss server. I'm sure there are more dependencies. Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-smbd: Regroup some init functions.Andreas Schneider1-12/+12
Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-smbd: Fixed indent.Andreas Schneider1-2/+3
Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-loadparm: Added some comments to lp_load_ex calls.Andreas Schneider1-9/+10
Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-smbd: Cleanup the order of the init functions.Andreas Schneider1-5/+6
Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-smbd: Make sure the event context is initialized.Andreas Schneider1-0/+3
Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3-build: remove pointless RPC_PARSE_OBJ2.Günther Deschner1-6/+4
Guenther
2010-08-13s3-waf: remove pointless RPC_PARSE_SRC2.Günther Deschner1-4/+2
Guenther
2010-08-13s3: Replace some cli_errstr calls by nt_errstrVolker Lendecke1-23/+44
2010-08-13s3-libnet: also remove libnet/libnet_samsync_keytab.c.orig.Günther Deschner1-305/+0
Guys, what are you doing here ? ;-) Guenther
2010-08-13s3-libnet: remove source3/libnet/libnet_join.c.orig, added by a previous commit.Günther Deschner1-2187/+0
Guenther
2010-08-13s3-dcerpc: fix build warning seen with -O3.Günther Deschner1-3/+3
"warning: assuming signed overflow does not occur when assuming that (X + c) < X is always false" Guenther
2010-08-13s3-krb5 Only build ADS support if arcfour-hmac-md5 is availableAndrew Bartlett10-21/+2520
Modern Kerberos implementations have either defines or enums for these key types, which makes doing #ifdef difficult. This shows up in files such as libnet_samsync_keytab.c, the bulk of which is not compiled on current Fedora 12, for example. The downside is that this makes Samba unconditionally depend on the arcfour-hmac-md5 encryption type at build time. We will no longer support libraries that only support the DES based encryption types. However, the single-DES types that are supported in common with AD are already painfully weak - so much so that they are disabled by default in modern Kerberos libraries. If not found, ADS support will not be compiled in. This means that our 'net ads join' will no longer set the ACB_USE_DES_KEY_ONLY flag, and we will always try to use arcfour-hmac-md5. A future improvement would be to remove the use of the DES encryption types totally, but this would require that any ACB_USE_DES_KEY_ONLY flag be removed from existing joins. Andrew Bartlett Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13s3:libnet Add other required headers for libnet_samsync_keytab.cAndrew Bartlett1-0/+3
Due to missing defines in modern kerberos libraries, this code was not compiled and so this wasn't noticed. Andrew Bartlett Signed-off-by: Simo Sorce <idra@samba.org>
2010-08-13tdb: add TDB_DEPS variable filled with required librariesBjörn Jacke6-9/+24
This is required for Solaris, which needs to link in librt to make use of fdatasync().
2010-08-13s3-build: pointless to link in libads and dcutils into smbcacls.Günther Deschner1-1/+1
Guenther
2010-08-13s3-build: separate out libads_printer.Günther Deschner1-3/+5
Guenther