summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-05-28s3:idmap_ldap: filter out of range mappings in default idmap configMichael Adam1-16/+55
This fixes bug #6417 Michael
2009-05-27tdb: Fix some recently introduced warnings in tdbtoolTim Prouty1-6/+6
2009-05-27s3: Allow child processes to exit gracefully if we are out of fdsMarc VanHeyningen9-25/+35
When we run out of file descriptors for some reason, every new connection forks a child that immediately panics causing smbd to coredump. This seems unnecessarily harsh; with this code change we now catch that error and merely log a message about it and exit without the core dump. Signed-off-by: Tim Prouty <tprouty@samba.org>
2009-05-27s3: zero an uninitialized arrayMarc VanHeyningen1-1/+4
Invalid pointers were being dereferenced in lookup_sids causing occasional seg faults. Signed-off-by: Tim Prouty <tprouty@samba.org>
2009-05-27s3:idmap: fix a comment typoMichael Adam1-1/+1
Michael
2009-05-27s3:idmap_tdb2: filter out of range mappings in default idmap configMichael Adam1-12/+49
This fixes bug #6416 Michael
2009-05-27s3:idmap_tdb: add an entry debug statment to idmap_tdb_db_init()Michael Adam1-0/+2
Michael
2009-05-27s3:idmap_tdb: filter out of range mappings in default idmap configMichael Adam1-16/+57
This fixes bug #6415 Michael
2009-05-27s3/docs: Correct version number.Karolin Seeger1-1/+1
Karolin
2009-05-27Revert "s3/docs: Fix build."Karolin Seeger1-1/+1
This reverts commit 84998cb85e59a92178d916f4e485c08fb826b838. Actually, the "fix" breaks the build. Works after 'make clean'. Sorry!
2009-05-27s3/docs: Fix build.Karolin Seeger1-1/+1
$(DBLATEX) was empty. Please check! Karolin
2009-05-27Modified SamDB to accept options like Ldb.Nadezhda Ivanova1-2/+2
2009-05-27s3: update manpage as to the new passdb backend defaultBjörn Jacke1-3/+5
2009-05-27s3: make passdb backend defaults to tdbsamBjörn Jacke1-1/+1
2009-05-27Fix the build of nfs4_acls.cVolker Lendecke1-1/+2
2009-05-27Fix a size_t/int warningVolker Lendecke1-1/+1
2009-05-27Fix some nonempty blank linesVolker Lendecke1-14/+13
2009-05-27Gna, how long do I program in C now??? :-)Volker Lendecke1-2/+2
2009-05-27Detect missing 'witch' before detecting missing autoconfAndrew Bartlett1-1/+6
2009-05-26s3/docs Add manpage for "map untrusted to domain" parameterSteven Danneman1-0/+33
This fixes bug 6352.
2009-05-27Handle the krbtgt special case by looking for RID -514Andrew Bartlett1-26/+52
It turns out (seen in MS-SAMR 3.1.1.7.1 for example) that the primary way the krbtgt account is recognised as special is that RID. This should fix issues such as 'password expired' on the kpasswd service. Andrew Bartlett
2009-05-27Add DOMAIN_RID_KRBTGT define to security.idlAndrew Bartlett2-0/+2
2009-05-27s4:tevent: Increase trace debug level to 50.Andrew Kroeger1-1/+1
The sheer volume of messages generated by tevent when the trace level is set to 10 makes it difficult to debug issues in a level 10 log. Increasing this to 50 allows tevent tracing to be enabled if needed, but otherwise keeps the extra chatter out of a level 10 log.
2009-05-26Attempt to fix the build on HP/UXVolker Lendecke2-0/+12
2009-05-26Attempt to fix the build on NetBSDVolker Lendecke3-6/+9
2009-05-26Revert "s3: fix build on systems with struct stat member st_flags"Björn Jacke1-3/+0
for a cleaner and more complete patch that Volker has in the queue :-)
2009-05-26s3: fix build on systems with struct stat member st_flagsBjörn Jacke1-0/+3
2009-05-26s4:ldb_modules: Correct typos.Andrew Kroeger2-2/+2
2009-05-26s4:ldb:modules: Correct typos.Andrew Kroeger4-6/+4
2009-05-26Fix some nonempty blank linesVolker Lendecke1-28/+27
2009-05-26Introduce "struct stat_ex" as a replacement for SMB_STRUCT_STATVolker Lendecke53-768/+768
This patch introduces struct stat_ex { dev_t st_ex_dev; ino_t st_ex_ino; mode_t st_ex_mode; nlink_t st_ex_nlink; uid_t st_ex_uid; gid_t st_ex_gid; dev_t st_ex_rdev; off_t st_ex_size; struct timespec st_ex_atime; struct timespec st_ex_mtime; struct timespec st_ex_ctime; struct timespec st_ex_btime; /* birthtime */ blksize_t st_ex_blksize; blkcnt_t st_ex_blocks; }; typedef struct stat_ex SMB_STRUCT_STAT; It is really large because due to the friendly libc headers playing macro tricks with fields like st_ino, so I renamed them to st_ex_xxx. Why this change? To support birthtime, we already have quite a few #ifdef's at places where it does not really belong. With a stat struct that we control, we can consolidate the nanosecond timestamps and the birthtime deep in the VFS stat calls. At this moment it is triggered by a request to support the birthtime field for GPFS. GPFS does not extend the system level struct stat, but instead has a separate call that gets us the additional information beyond posix. Without being able to do that within the VFS stat calls, that support would have to be scattered around the main smbd code. It will very likely break all the onefs modules, but I think the changes will be reasonably easy to do.
2009-05-26s3:smbd: remove unused global 'orig_inbuf'Stefan Metzmacher2-2/+0
metze
2009-05-26s3:pam_smbpass: don't call openlog() or closelog() from pam_smbpassBjörn Jacke5-80/+104
Patch from Steve Langasek with tiny fixes by me to make it apply to master. Also see Debian bug #434372 and bugzilla #4831. Calling openlog() or closelog() inside a pam module is not good as these functions are not stackable and no program won't re-do openlog() just because a pam module might have called closelog().
2009-05-26gitignore: Ignore additional auto-generated files.Andrew Kroeger1-1/+3
Corrected path to tdr_proto.h and added librpc/gen_ndr/{cli,srv}_dcerpc.[ch].
2009-05-26s3/docs: Fix typo in man idmap_rid.Karolin Seeger1-1/+1
Karolin
2009-05-26s3:smbd: move SMB1 specific stuff into a substructure of smbd_server_connectionStefan Metzmacher5-28/+30
metze
2009-05-26s3:smbd: add support for SMB2 signingStefan Metzmacher5-55/+280
metze
2009-05-26s3:smbd: return the correct security mode and capabilities in SMB2 NegotitateStefan Metzmacher1-5/+18
metze
2009-05-26s4:libcli/smb2: remove old dialect revision constantsStefan Metzmacher1-4/+0
metze
2009-05-26s4:smb2srv: We only support SMB 2.002.Stefan Metzmacher2-6/+12
We need to loop over all given dialects and check if we can find SMB2_DIALECT_REVISION_202. metze
2009-05-26s4:libcli/smb2: use new SMB2_DIVELECT_REVISION constantsStefan Metzmacher1-2/+5
Also send them in the order a windows client would send them (the lowest first). metze
2009-05-26s4:libcli/smb2: add some more SMB2 constantsStefan Metzmacher1-4/+14
metze
2009-05-26s3 WHATSNEW: Mention the changes to netKai Blin1-0/+35
2009-05-26Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell18-615/+330
2009-05-26s4:provision: Added ComPartitionSets entry.Andrew Kroeger1-0/+5
Without this entry, opening the COM+ tab under the properties of an OU within ADUC results in the following error: "Unable to retrieve all user properties, 0x80072030"
2009-05-26s4:Added Extended-Rights and subentries.Andrew Kroeger1-0/+881
Without these entries, using the 'Delegate Control' option in ADUC results in the following error message in the Delegation of Control Wizard: "The templates could not be applied. One or more of the templates is not applicable. Click Back and select different templates, and then try again."
2009-05-26s4:provision: Update DisplaySpecifiers (#5139).Andrew Kroeger1-0/+369
The classDisplayName attribute controls the actual text displayed to the user for the top-level menus, so added it to the existing entries. The attributeDisplayNames attribute contains both the text displayed to the user and a mapping to the internal directory attribute name for the particular field, so added these to the existing entries as well. Added new entries as appropriate to properly complete all menus and labels within ADUC.
2009-05-26Don't use crossRef records to find our own domainAndrew Bartlett16-615/+253
A single AD server can only host a single domain, so don't stuff about with looking up our crossRef record in the cn=Partitions container. We instead trust that lp_realm() and lp_workgroup() works correctly. Andrew Bartlett
2009-05-26Add support for sendmsg() in socket_wrapperAndrew Bartlett2-0/+77
This is required because the deferred connect code skips the connect() until sending the packet, but unless we catch this call, the connect() never happens. Andrew Bartlett
2009-05-26Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell31-339/+775