summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-05-19s3: re-run make samba3-idl.Günther Deschner3-0/+106
Guenther
2009-05-19lsa: add access_masks for accounts, secrets and trusted domains to IDL.Günther Deschner1-1/+24
Guenther
2009-05-18Change access_check_samr_object -> access_check_object.Jeremy Allison3-24/+25
Make map_max_allowed_access global. Change lsa_get_generic_sd to add Everyone:LSA_POLICY_READ|LSA_POLICY_EXECUTE, not just LSA_POLICY_EXECUTE. Jeremy.
2009-05-19s3-lsa: let _lsa_OpenPolicy() just call _lsa_OpenPolicy2().Günther Deschner1-37/+6
Guenther
2009-05-18s3-selftest: enable RPC-SAMR-USERS-PRIVILEGES.Günther Deschner1-1/+1
Guenther
2009-05-18Fix SAMR server for winbindd access. Ensure we allowJeremy Allison1-2/+2
MAX_ACCESS to be mapped to what we're giving Everyone. Jeremy.
2009-05-18s3-lsa: let _lsa_GetSystemAccessAccount() call into _lsa_EnumPrivsAccount().Günther Deschner1-3/+23
Inspired by lsa server from Samba 4. Just removing a user in SAMR does not remove a user in LSA. If you use usermanager from windows, the "User Rights" management gui gets unaccessable as soon as you delete a user that had privileges granted. With this fix, that no longer existing user would properly appear as an unknown account in the GUI (as it does while using usermanager with windows domains). This almost makes Samba3 pass the RPC-SAMR-USERS-PRIVILEGES test. Guenther
2009-05-18s3-lsa: start a very basic implementation of _lsa_DeleteObject().Günther Deschner1-1/+23
Certainly not the full story but this gets us closer to pass the RPC-SAMR-USERS-PRIVILEGES test. Guenther
2009-05-18s4-smbtorture: add RPC-SAMR-USERS-PRIVILEGES test.Günther Deschner2-9/+387
This test demonstrates the independence of the lsa and samr accounts while remove a samr users that still has privileges granted. Guenther
2009-05-18Move down the become_root()/unbecome_root() calls into the VFS modulesVolker Lendecke2-8/+22
The aio_fork module does not need this, as it does not communicate via signals but with pipes. Watching a strace log with those become_root() calls in aio.c is absolutely awful, and it does affect performance.
2009-05-18Fix bug 5681: Do not limit the number of network interfacesVolker Lendecke4-25/+40
Jeremy as far as I can see there is no real technical reason to limit the number of interfaces. If you like this patch, can you please merge it to 3.4? If you don't please tell me :-) Thanks, Volker
2009-05-18In aio_fork, we have to close all fd's, we might hold a gpfs share modeVolker Lendecke1-0/+16
Keeping such an fd open prohibits another open of that same file.
2009-05-18Add "file_walk_table" to do stuff with all open filesVolker Lendecke2-0/+26
2009-05-18Fix a race condition in vfs_aio_fork with gpfs share modesVolker Lendecke1-2/+8
2009-05-18Fix broken pipe handlingVolker Lendecke2-4/+4
Metze is right: If we have *any* error at the socket level, we just can not continue. Also, apply some defensive programming: With this async stuff someone else might already have closed the socket.
2009-05-18Fix a type-punned warningVolker Lendecke1-1/+1
2009-05-19s3: tevent_req_poll() loops forever when pipe is brokenBo Yang2-1/+28
Signed-off-by: Bo Yang <boyang@samba.org>
2009-05-17s3:fix bug #6371, unsuccessful net conf setparm leaves empty shareMichael Adam1-3/+25
Wrap creation of share and setting of parameter into a transaction. Michael
2009-05-17s3-events: Not only timed, also immediate events generate a timeout returnVolker Lendecke1-1/+1
2009-05-16Move smb_create_user() in samsyncSimo Sorce3-65/+60
It is not used anywhere else, so make it also static and remove it from proto.h
2009-05-16tevent: Define TALLOC_FREE() if it's not defined yet, to allow buildingJelmer Vernooij1-0/+6
with released versions of talloc.
2009-05-16Fix static linking of vfs_notify_famVolker Lendecke2-1/+6
2009-05-16Fix a typoVolker Lendecke1-1/+1
2009-05-16s3-events: If immediate requests are pending, the timeout is 0Volker Lendecke1-0/+9
2009-05-16Fix the merged build -- thanks jelmer for the hint!Volker Lendecke1-2/+0
2009-05-16tevent: Remove python module.Jelmer Vernooij8-222/+0
This module didn't have any functionality that we actually used yet, and it was quite small. Tevent is quite low level and perhaps doesn't make much sense to expose directly as a Python module. It was also causing build problems when used with a system-tevent. We can always back later if necessary.
2009-05-16tevent: Install tevent_internal.h in the standalone build.Jelmer Vernooij2-1/+4
This is not ideal, but at least it fixes the build of samba-gtk for now. I've also added a warning about API guarantees at the top of the header.
2009-05-16Fix linker flags on non-Linux GNU platforms.Samuel Thibault1-5/+5
(e.g. Debian GNU/kFreeBSD) Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2009-05-16Update copies of config.guess and config.sub.Jelmer Vernooij16-539/+1985
2009-05-16tevent: Don't install headers, since we don't install a shared libJelmer Vernooij1-5/+0
either (from Samba).
2009-05-16s3-privileges: add privilege_delete_account().Günther Deschner2-0/+29
Guenther
2009-05-16s3-privileges: remove trailing whitespace from privileges codes.Günther Deschner2-105/+105
Guenther
2009-05-15Oops. Forgot to delete now unused local from the previous patch.Jeremy Allison1-2/+0
Jeremy.
2009-05-15Fix bug #6359 - smbclient -L does not list workgroup for hosts with both ↵Ole Hansen1-4/+10
IPv4 and IPv6 addresses
2009-05-15s3:build: fix linking with --disable-shared-libsMichael Adam1-0/+1
Michael
2009-05-15Ensure users with SeAddUser privs get full access toJeremy Allison1-3/+3
groups/aliases when opening. Jeremy.
2009-05-15Add extra abilities for a user with SeAddUsers, so theyJeremy Allison1-2/+15
can manipulate groups and aliases. Jeremy.
2009-05-15DeleteUser doesn't need the priv checks, this is done at OpenUser time.Jeremy Allison1-20/+0
Jeremy.
2009-05-15s3-samr: Fix samr access checks in _samr_RemoveMemberFromForeignDomain().Günther Deschner1-1/+1
Guenther
2009-05-15Fix bug 6361: Make --rcfile work in smbgetVolker Lendecke1-1/+1
Thanks to j scott <gl@arlut.utexas.edu> for reporting!
2009-05-15mount.cifs: directly include sys/stat.h in mtab.cJeff Layton1-0/+1
This file is mysteriously getting included when built via the makefile, but when you try to build mtab.o by hand it fails to build. Directly include it to remove any ambiguity. Signed-off-by: Jeff Layton <jlayton@redhat.com>
2009-05-15s3-netdomjoin-gui: allow to switch between workgroups/domains with the same ↵Günther Deschner1-2/+4
name. Guenther
2009-05-15s3-netdomjoin-gui: cosmetic fix for empty hostnames.Günther Deschner1-0/+1
Guenther
2009-05-15s3-netdomjoin-gui: only gray out labels when not root and not connecting toGünther Deschner1-3/+3
remote machines. Guenther
2009-05-15s3:swat: hide "config backend" from swatMichael Adam1-1/+1
Michael
2009-05-15s3:param: prevent includes from being dumped in dump_*() functions.Michael Adam2-3/+7
This fixes bug #4271: testparm should not print includes. Michael
2009-05-15s3:build: add install-dbwrap_tool targetMichael Adam1-0/+3
Michael
2009-05-15s3:build dbwrap_tool with make everythingMichael Adam1-1/+2
Michael
2009-05-15errormap: Remove wbc -> NTSTATUS error map for now. It is not used.Jelmer Vernooij2-43/+0
This was breaking the Samba 4 installation since it added dependencies on header files we weren't installing. Confirmed with Kai.
2009-05-15s3-samr: Fix samr access checks in _samr_SetUserInfo().Günther Deschner1-14/+109
Guenther