summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-01-29s4: Ignore few more auto-generated filesKamen Mazdrashki1-0/+2
2010-01-29librpc: rerun 'make idl'Stefan Metzmacher1-0/+3
metze
2010-01-29security.idl: add wellknown TrustedInstaller SIDStefan Metzmacher1-0/+7
metze
2010-01-29s3: by default don't use pthread pool supportBjörn Jacke1-5/+5
2010-01-29lib/util: remove data_blob_talloc_reference()Stefan Metzmacher2-23/+0
We want to avoid the usage of talloc_reference() in Samba. metze
2010-01-29s4:auth_sam: avoid usage of data_blob_talloc_reference() and copy the ↵Stefan Metzmacher1-4/+14
session keys metze
2010-01-29s4:libcli: remove unneeded talloc_reference() usageStefan Metzmacher1-4/+1
metze
2010-01-28s4:kdc remove dead code and commentsSimo Sorce1-5/+0
2010-01-28s4:kdc Fill in more data fieldsSimo Sorce1-4/+8
2010-01-28s4:kdc move db functions in their own fileSimo Sorce8-1468/+1621
Keep all heimdal related plugin code within hdb_samba4.c Move interfaces needed by multiple plugins in db-glue.c Move sequence context in main db context so that we do not depend on db->hdb_dbc in the common code. Remove unnecessary paremeters from function prototypes
2010-01-28s4:kdc Use a clearer name for the samba kdc entrySimo Sorce4-32/+30
Renames hdb_samba4_private to samba_kdc_entry Streamlines members of the entry and the kdc db contextto avoid unnecessary duplication.
2010-01-28s4:kdc Use better db context structureSimo Sorce6-93/+114
This allows to use a common structure not tied to hdb_samba4 Also allows to avoid many casts within hdb_samba4 functions This is the first step to abstract samba kdc databse functions so they can be used by the MIT forthcoming plugin.
2010-01-28Fix bug #7069 - smbget does not return an error status after some errorsJeremy Allison1-38/+45
A combination patch from Johannes Poehlmann <johannes@lst.de> and Jeremy. Fix the return codes from smb_download_file() and smb_download_dir(). Jeremy.
2010-01-28s3/winbind_ccache: Fix typo in debug message.Karolin Seeger1-1/+1
Karolin
2010-01-28tsocket: Fix the description of tstream_writev_queue_send/recvKai Blin1-6/+6
2010-01-28tsocket: Fix description for tstream_readv_pdu_queue_send/recvKai Blin1-7/+6
2010-01-28s4-ldbtest: fixed python importAndrew Tridgell1-2/+2
2010-01-28s4-drs: implementation of some delete test casesEduardo Lima2-0/+201
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-28cleanup: remove trailing spaces and tabsSimo Sorce1-37/+37
2010-01-28s4-drs: Reads uSNUrgent and sets Urgent Replication Bit for DS_ReplicaSync ↵Fernando J V da Silva2-7/+24
when necessary If an urgent replication is necessary, so the uSNUrgent stored is equal to the uSNHighest stored, then when sending the DS_ReplicaSync message it sets the DRSUAPI_DRS_SYNC_URGENT bit on DRS_OPTIONS. Signed-off-by: Fernando J V da Silva <fernandojvsilva@yahoo.com.br> Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-27Second part of fix for bug #7072 - Accounts can't be unlocked from ldap.Jeremy Allison1-1/+2
Missed read of entry_timestamp (was entry->entry_timestamp). Jeremy.
2010-01-27Fix bug #7072 - Accounts can't be unlocked from ldap.Jeremy Allison1-7/+15
Fix suggested by Andy Hanton <andyhanton@gmail.com>. The LOGIN_CACHE struct contains two time_t entries, but was being written to and read from via tdb_pack/tdb_unpack functions using explicit 32-bit int specifiers. This would break on machines with a 64-bit time_t. Use correct int sizes for tdb_pack/tdb_unpack. We have to fix this properly before 2037 :-). Jeremy.
2010-01-28testsuite/libsmbclient use source3 in the path of the C and LFLAGSLars Müller1-2/+2
2010-01-28Link testsuite/libsmbclient against required libtdb and libwbclientLars Müller1-1/+1
2010-01-27s3: syntax fixBjörn Jacke1-1/+1
2010-01-27s3: Install and uninstall the static version of libwbclientLars Müller1-0/+2
This requires to call configure with --enable-static which isn't the case by default.
2010-01-27s4:windc move windc plugin in its own fileSimo Sorce5-191/+228
Keep all heimdal related plugin code within wdc-samba4.c Leave only interfaces common to multiple plugins in pac-glue.c
2010-01-27s4:PAC make common functions publicSimo Sorce2-25/+70
2010-01-27s4:PAC Streamline pac-glue step 2Simo Sorce1-55/+113
Split functions so that no assumption is made about which plugin is using them
2010-01-27s4:PAC Streamline pac-glueSimo Sorce1-19/+40
First step, preparing to share the code between multiple plugins.
2010-01-27s3: get pthread detection also on HP-UX rightBjörn Jacke1-1/+12
2010-01-27Implemented net fsmo command for transferring fsmo rolesNadezhda Ivanova2-0/+204
The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27s4-smbtorture: pick correct last packet while checking backchannel replies ↵Günther Deschner1-2/+10
in RPC-SPOOLSS-NOTIFY. Guenther
2010-01-27s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the ↵Günther Deschner1-1/+3
buildfarm. Guenther
2010-01-27s4:torture: refactor querying of domain info out into ↵Michael Adam1-52/+40
test_QueryDomainInfo2_level() Used in several places. (Note: The _level suffix in the function name is just because test_QueryDomainInfo2() already exists as an overall test for all levels.) Michael Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27s4:torture: create new test_SetDomainInfo_ntstatus()Michael Adam1-12/+26
for checking for SetDomainInfo giving a desired return code. Michael Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27s4:torture: refactor setting of domain inf out into test_SetDomainInfo()Michael Adam1-101/+56
and use it in several places. Michael Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-27s4:torture: refactor setting account flags out into ↵Michael Adam1-50/+46
test_SetUserInfo_acct_flags() and use this in four places (enabling/disabling accounts). Michael Signed-off-by: Günther Deschner <gd@samba.org>
2010-01-26Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to ↵Jeremy Allison3-5/+71
respond to a read or write. Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability to allow Linux threads under different euids to send signals to each other. Jeremy.
2010-01-26Add dependency of bin/smbfilter to libwbclient.Lars Müller1-1/+1
2010-01-26s4-libcli: Fixed a talloc_reference error.Andreas Schneider1-0/+1
Signed-off-by: Andreas Schneider <asn@redhat.com> Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-26s4:winsrepl.idl: add random interface uuidStefan Metzmacher1-1/+4
This is needed to include the wrepl interface into ndrdump. metze
2010-01-26s4:smbtorture: add BASE-BENCH-HOLDOPENStefan Metzmacher2-0/+64
This is useful for manual performance testing with a large number of share mode entries. metze
2010-01-26mount.cifs: don't allow it to be run as setuid root programJeff Layton1-1/+38
mount.cifs has been the subject of several "security" fire drills due to distributions installing it as a setuid root program. This program has not been properly audited for security and the Samba team highly recommends that it not be installed as a setuid root program at this time. To make that abundantly clear, this patch forcibly disables the ability for mount.cifs to run as a setuid root program. People are welcome to trivially patch this out, but they do so at their own peril. A security audit and redesign of this program is in progress and we hope that we'll be able to remove this in the near future. Signed-off-by: Jeff Layton <jlayton@redhat.com>
2010-01-26mount.cifs: check for invalid characters in device name and mountpointJeff Layton1-0/+34
It's apparently possible to corrupt the mtab if you pass embedded newlines to addmntent. Apparently tabs are also a problem with certain earlier glibc versions. Backslashes are also a minor issue apparently, but we can't reasonably filter those. Make sure that neither the devname or mountpoint contain any problematic characters before allowing the mount to proceed. Signed-off-by: Jeff Layton <jlayton@redhat.com>
2010-01-26mount.cifs: take extra care that mountpoint isn't changed during mountJeff Layton1-8/+26
It's possible to trick mount.cifs into mounting onto the wrong directory by replacing the mountpoint with a symlink to a directory. mount.cifs attempts to check the validity of the mountpoint, but there's still a possible race between those checks and the mount(2) syscall. To guard against this, chdir to the mountpoint very early, and only deal with it as "." from then on out. Signed-off-by: Jeff Layton <jlayton@redhat.com>
2010-01-26s4-smbtorture: also test smbc_getOptionUseCCacheGünther Deschner2-1/+3
2010-01-26s3: Enable use of ccache by default for libsmbclientVolker Lendecke1-0/+3
Disable this by setting the environment variable LIBSMBCLIENT_NO_CCACHE, which has the advantage over an smb.conf option to be easily settable per application.
2010-01-25Correct fix for unused variable return from ndr_decode. Use it :-).Jeremy Allison1-0/+8
Jeremy.
2010-01-25Revert "s3: remove unused Variable"Jeremy Allison1-0/+4
This reverts commit 9536d94d5478b63fc05047964b40d8786a7246c4. Bjorn, your change removed the ndr_decoding of the dos attribute. Not a good idea :-). Jeremy.