Age | Commit message (Collapse) | Author | Files | Lines |
|
the most likely bugs in HSM involve zero data, due to the
dm_punch_hole() request
(This used to be commit 330ab956ea7e0b344450eee60b1357d854fbef28)
|
|
farm failures when winbindd connects as guest.
This one took a *lot* of tracking down :-).
Jeremy.
(This used to be commit dca827791276906436452c650062164eb819dfe0)
|
|
The call was looking up a uid and not gid in the cache.
(This used to be commit 25293ba1507f8f8fa7e33c302200184e980bb123)
|
|
Fix segv when talking to parent DC (joined to child domain).
The root cause was
(a) storing the parent domain in the cli_state struct caused
the NTLMSSP pipe bind to fail which made us fallover to
the schannel code path
(b) the dcinfo pointer in cm_get_schannel_dcinfo() was returning
NULL even though the function indicated success.
(This used to be commit 5ce4a2ae6697970ea37d0078a506615b4b7a9a9c)
|
|
When we added the ability for the kernel to send sec=mskrb5 to the
upcall, we subtly broke old cifs.upcall versions that don't understand
it. Bump the spnego message version to 2 to make this clear. Also,
change cifs.upcall to not reject requests with a version that's lower
than the current one, and to send the reply with the same version that
the request sent. The idea is to try and keep cifs.upcall backward
compatible with old kernels.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit b868463015dedc684eb13d12118a98ccca71250a)
|
|
Karolin
(This used to be commit 8d0a16d8034cd07037b3c7711867280d5fa5b2c8)
|
|
Karolin
(This used to be commit c7aef4b38bd2b152b316d8d76b45be4b73ca315f)
|
|
(This used to be commit 6028404a9a9db64d4025ef6e685ee13c4aadca2e)
|
|
value in for group type to avoid sign extension, otherwise we don't
find the builtin groups
(This used to be commit 9b558639395bd8209313bb7ed2e04821c83975a4)
|
|
(This used to be commit 7dce38f9897df02073132f18b1021e0d0636590c)
|
|
Karolin
(This used to be commit a415244365e32ba18919042ec72b3a281d8c1b0a)
|
|
Karolin
(This used to be commit fc5010e6d988939779bcb44e8a460b7b05e7ba9a)
|
|
(This used to be commit 93cf0b3c7e6d8a4758c44519de51e51be89f76c7)
|
|
(This used to be commit 115053ea7e70b067e7873668ed83f1f10908287d)
|
|
(This used to be commit 3c058f50cc3b91d540feb51fb698d90565b2b7c9)
|
|
Karolin
(This used to be commit fcfab4703628e19902c140a7ad9531d4be0de01d)
|
|
(This used to be commit 469fac2669991b130dec219e1a109a8b2ce224be)
|
|
The core ldb code for string matching assumed NULL terminated strings,
whereas the anr module used data_blob_const() to effectively truncate
a ldb_val by changing its length. The ldb code is supposed to be based
around length limited blobs, not NULL terminated strings, so the
correct fix was to change the string comparison functions to be length
limited
(This used to be commit 26c6aa5a80ffaf06fc33f30a6533f8f16ef538bc)
|
|
when we can't process an ANR request we need to continue with the
parse tree we were given, not a NULL tree
(This used to be commit ed66feb80aac7432049fe9fd86a9232984587e17)
|
|
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit aa3443492c58a7c109fe159e15d763dbafc66f2a)
|
|
When building on linux, default to building cifs.upcall. Throw a
warning if ADS support is disabled or keyutils isn't installed.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit d8018d15f013b8d7be8618b75dac5112711193b7)
|
|
cifs.upcall links to libraries that live under /usr, so installing it
in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead
(i.e. /usr/sbin).
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit 5c9a1b2c98cc712fc519225e62fba4e5088631a3)
|
|
When the kernel sends the upcall a sec=mskrb5 parameter, that means
the the MSKRB5 OID is preferred by the server. This patch fixes the
upcall to use that OID in place of the "normal" krb5 OID when it
gets a sec=mskrb5 parameter.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Acked-by: Steve French <smfrench@gmail.com>
(This used to be commit 6287e13b34efeaa8fd94c7c6d99468350ce6172e)
|
|
krb5 mounts require that the user already have a valid krb5 ticket.
Since we can't currently use the password entered, don't prompt for it.
Also, switch to using strncmp instead of strcmp here.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit c75791c34abebe23c6f6a5534b0358514ec4eabc)
|
|
domain name.
Jeremy.
(This used to be commit 33019fe2b5f521c143fc79edb915eca69b9ed98d)
|
|
Guenther
(This used to be commit f3791e03ab09cadb1f54e32e67f4dfb3cf42e708)
|
|
When we negotiated NETLOGON_NEG_PASSWORD_SET2 we need to use
NetrServerPasswordSet2 to change the machine password.
Tested with NT4, W2k, W2k3 and W2k8.
Guenther
(This used to be commit 5820360451e4db0fad0472f814cae667b2ea51fd)
|
|
<Douglas_E_Wegscheid@whirlpool.com>.
Jeremy.
(This used to be commit 1295bb9787dde69b4be4acee7b66eb782afe9c42)
|
|
Guenther
(This used to be commit f24cef9fa7be45212744d39b7c66804e64147afd)
|
|
Guenther
(This used to be commit 7b312a0abc6de5a51555ccfbde7f8f78fc11d043)
|
|
The output doesn't match the output from windows servers,
but it's a start...
metze
(This used to be commit 8a2f9688275aa150b739b5525e738df15c5e25cc)
|
|
This isn't really the final solution, as we compress the data twice,
but it works.
metze
(This used to be commit 6da1d41173a7b82412fcebdd751eade51cf82b2a)
|
|
Michael
(This used to be commit 25fed055c0ee1d892b902caae2a1188977316f14)
|
|
Michael
(This used to be commit b476400f0afcaf4e1a37b9f0b358f01dc7a194be)
|
|
build
Michael
(This used to be commit fe62098666a16b31b025867f273d407e77152c4c)
|
|
Without needing to install libsmbclient to /usr/local/samba first.
Michael
(This used to be commit f0e47bce2e98131812e96fb88cc3d1fe939e8d6c)
|
|
Michael
(This used to be commit 28688cfd57c322937f2c63087380c377bd961018)
|
|
metze
(This used to be commit 9fe466f84afcbd64c9bbfe0f9ea6c1933acb07fe)
|
|
This is a partial fix towards bugs due to us walking past the end of
what we think are strings in ldb. There is much more work to do in
this area.
Andrew Bartlett
(This used to be commit 5805a9a8f35fd90fa4f718f73534817fa3bbdfd2)
|
|
Andrew Bartlett
(This used to be commit 0b6e53f80b063d8702718c84409d7b069aee9c05)
|
|
Something in the search stack adds a distinguisedName record, which
isn't in the message we generate. So we compare, fail and rewrite the
record - every time ldb starts up...
Andrew Bartlett
(This used to be commit 44775d1ed4a4b8edc66a06e2b3710aba6a0dd019)
|
|
(This used to be commit 682ca3cae1d5e796bc58142f79c99d43742ac85c)
|
|
We don't need to just bail, for all these error cases there is still
real result that can be made - just fall back to binary copy/compare.
Andrew Bartlett
(This used to be commit 6aa5dde2aa9a5f070871ecc117e44bfcad363459)
|
|
template.
Andrew Bartlett
(This used to be commit b36c6a21ad12fdc1b53efdc3f29cde7614b4fa9e)
|
|
This ensures that a rudementary schema is always present (for
bootstrapping), and that the indexes are maintained equal to the
schema (rather than hard-coded).
Andrew Bartlett
(This used to be commit 747d683b0d92c3b1cde67245d514977a2c87dc44)
|
|
(This used to be commit 94d5e69190f34d66d4defd4a7de7ce24bee77bc3)
|
|
This is now handled by reading the schema into the attributes.
Also, when we do set something here, mark it as FIXED, so the schema
and any reload from @ATTRIBUTES won't touch it.
Andrew Bartlett
(This used to be commit 7b24701335398ece3d1b3a20cf5f1174500b16ce)
|
|
(This used to be commit 233dd885c2a2b4ee7cc2287efe7d6e03625d4981)
|
|
(This used to be commit 505a0c2b702b696b91dab683626bb25b14a49c38)
|
|
(This used to be commit 8003ee9abf474de534677283fc499f9a3d992b20)
|