summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-01-20s4-auth Remove special case for account_sid from auth_serversupplied_infoAndrew Bartlett14-288/+257
This makes everything reference a server_info->sids list, which is now a struct dom_sid *, not a struct dom_sid **. This is in keeping with the other sid lists in the security_token etc. In the process, I also tidy up the talloc tree (move more structures under their logical parents) and check for some possible overflows in situations with a pathological number of sids. Andrew Bartlett
2011-01-20s4-gensec Add prototype for gensec_ntlmssp_init()Andrew Bartlett1-0/+2
Andrew Bartlett
2011-01-20libcli/auth move ntlmssp_wrap() and ntlmssp_unwrap() into common code.Andrew Bartlett3-123/+159
The idea here is to allow the source3/libads/sasl.c code to call this instead of the lower level ntlmssp_* functions. Andrew Bartlett
2011-01-20s4:selftest: mark samba4.nbt.winsreplication.owned as knownfailStefan Metzmacher1-0/+1
This sometimes fails on a busy server. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Jan 20 09:29:12 CET 2011 on sn-devel-104
2011-01-20s4:selftest/skip: remove samba4.tokengroups.pythonStefan Metzmacher1-1/+0
metze
2011-01-20s3:smbd: use anonymous_shared_free() for shared memory signing stateStefan Metzmacher1-0/+7
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Jan 20 07:48:29 CET 2011 on sn-devel-104
2011-01-20lib/util: add tests for anonymous_shared_allocate/free()Stefan Metzmacher3-1/+87
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Jan 20 06:25:03 CET 2011 on sn-devel-104
2011-01-20lib/util: add anonymous_shared_free()Stefan Metzmacher2-2/+40
metze
2011-01-20lib/util: s/allocate_anonymous_shared/anonymous_shared_allocate/Stefan Metzmacher3-3/+3
metze
2011-01-20lib/util: fix rounding to page size in allocate_anonymous_shared()Stefan Metzmacher1-1/+5
metze
2011-01-19s4-selftest Remove knownfail for tokengroups testAndrew Bartlett1-1/+0
The problem with this test (use of None rather than "" has been fixed) Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Jan 19 23:56:31 CET 2011 on sn-devel-104
2011-01-19s4-dsdb Don't use None as the input to the GENSEC loop in tokengroups testAndrew Bartlett1-1/+1
The input to gensec.update() should always be a string. Andrew Bartlett
2011-01-19s3-param: Fixed code block in max_open_files().Andreas Schneider1-1/+1
When the HAVE_GETRLIMIT and RLIMIT_NOFILE macros are defined the block isn't closed. Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Wed Jan 19 23:10:50 CET 2011 on sn-devel-104
2011-01-19s3-smbd: Fixed a possible null pointer dereference.Andreas Schneider1-1/+3
2011-01-19wafsamba: quote CPP and CC values when calling pidlStefan Metzmacher1-4/+4
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 19 20:23:50 CET 2011 on sn-devel-104
2011-01-19s4:selftest/skip: add samba4.tokengroups.pythonStefan Metzmacher2-1/+2
This fails randomly like this with an error (not a failure): [651/695 in 27m37s] samba4.tokengroups.python(dc) running client gensec_update UNEXPECTED(error): samba4.tokengroups.python(dc).__main__.TokenTest.test_pac_groups REASON: _StringException: _StringException: Content-Type: text/x-traceback;charset=utf8,language=python traceback 1E2 Traceback (most recent call last): File "/usr/lib/python2.6/dist-packages/testtools/runtest.py", line 128, in _run_user return fn(*args) File "/usr/lib/python2.6/dist-packages/testtools/testcase.py", line 368, in _run_test_method testMethod() File "/memdisk/tridge/flakey/b2413/source4/source4/dsdb/tests/python/token_group.py", line 142, in test_pac_groups (client_finished, client_to_server) = gensec_client.update(server_to_client) TypeError: expected a string 0 FAILED (0 failures and 1 errors in 0 testsuites) A summary with detailed information can be found in: ./st/summary test: running (/usr/bin/perl /memdisk/tridge/flakey/b2413/source4/source4/../selftest/selftest.pl --prefix=./st --builddir=. --srcdir=. --exclude=./selftest/skip --testlist="/usr/bin/python ./selftest/tests.py|" --exclude=./selftest/slow --socket-wrapper && touch ./st/st_done) | /usr/bin/python -u ../selftest/filter-subunit --expected-failures=./selftest/knownfail --fail-immediately | tee ./st/subunit | /usr/bin/python -u ../selftest/format-subunit --prefix=./st --immediate ERROR: test failed with exit code 1 metze
2011-01-19s4-dsdb Add PAC validation test to tokengroups test.Andrew Bartlett2-21/+79
This confirms that the groups obtained from a Kerberos PAC match those that a manual search of a target LDAP server would reveal. This should allow mixing of a KDC specified by krb5.conf to test Samba or Windows alternatly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Jan 19 13:13:48 CET 2011 on sn-devel-104
2011-01-19s4-pyauth Fix AuthContext wrapperAndrew Bartlett1-2/+13
2011-01-19s4-auth Allow NULL methods to be specified to auth_context_create_methods()Andrew Bartlett1-14/+3
This allows us to init an auth context that isn't going to do any NTLM authentication, but is used by other subsystems. Andrew Bartlett
2011-01-19s4-dsdb Add a test of the tokenGroups behaviour on the user's DN.Andrew Bartlett1-3/+21
Andrew Bartlett
2011-01-19s4-gensec Remove special case 'for SASL' that is not required any more.Andrew Bartlett1-13/+0
I've examined the code paths involved, and it appears an alternative fix has been made in the ldap_server/ldap_bind.c code, and there is no code path that uses this behaviour. Andrew Bartlett
2011-01-19tdb: Added doxygen documentation.Andreas Schneider3-25/+2454
Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Wed Jan 19 11:26:34 CET 2011 on sn-devel-104
2011-01-19s3: Add wbinfo --dc-infoVolker Lendecke8-2/+284
wbinfo --dc-info prints the current DC name and IP address. This helps diagnosing problems that might happen when a later wbinfo --ping-dc fails. This patch started out by using the SAF and NBT cache entires, but those are relatively short-lived. So I decided to invent a new gencache entry with a very long timeout. We need to go via the gencache because when for some reason a winbind child process is stuck, we can't query it for the current DC it's connected to. This must eventually go away again when we have a fully async winbind. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Jan 19 08:40:28 CET 2011 on sn-devel-104
2011-01-19Add DELETE-LN test to show bug #7863 - Unlink may unlink wrong file when ↵Jeremy Allison1-0/+111
hardlinks are involved Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 19 03:06:32 CET 2011 on sn-devel-104
2011-01-19waf: change private libraries to use the same soname as public librariesAndrew Tridgell1-7/+5
See http://lists.samba.org/archive/samba-technical/2011-January/075816.html for a description of the reason behind this change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jan 19 02:21:06 CET 2011 on sn-devel-104
2011-01-19pygensec: remove special case handling for None for buffersAndrew Tridgell2-36/+29
always returning a buffer makes life easier for callers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-19Fix "net usersidlist" not to skip every other userOlly Betts1-1/+0
Remove double increment from for loop over users in get_user_tokens(), left over from when this used to be a while loop. Bug was introduced in 1e39a619. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 19 01:34:29 CET 2011 on sn-devel-104
2011-01-19s3-winbind: no need to include ../librpc/gen_ndr/cli_lsa.h inGünther Deschner1-1/+0
winbindd/winbindd_msrpc.c. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Jan 19 00:37:46 CET 2011 on sn-devel-104
2011-01-18s3-rpc_client: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.Günther Deschner1-1/+1
Guenther
2011-01-18s3-netlogon: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.Günther Deschner1-1/+1
Guenther
2011-01-18s3-netlogon: no need to include ../librpc/gen_ndr/cli_samr.h anymore.Günther Deschner1-1/+1
Guenther
2011-01-18s3-net: use correct spoolss header in net rpc.Günther Deschner1-1/+1
Guenther
2011-01-18s3-net: use correct spoolss header in net_ads.c.Günther Deschner1-1/+1
Guenther
2011-01-18Fix error where Windows client spoolss returns WERR_INVALID_DATA ↵Jeremy Allison1-0/+4
W_ERROR(0x0000000D) on opening a printer. We can't return zero for devmode->size. Guenther please check ! Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Jan 18 23:45:33 CET 2011 on sn-devel-104
2011-01-18s4:tls_tstream: also use a dynamic buffer for the pull sideStefan Metzmacher1-3/+12
Maybe that fixes the remaining issues with some gnutls versions. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jan 18 17:26:08 CET 2011 on sn-devel-104
2011-01-18s4:tls_tstream: fix partial reads, so that the gnutls layer doesn't read the ↵Stefan Metzmacher1-1/+6
same data twice metze
2011-01-18s4-tests: Added a test for correct inheritance of IO flagged ACEs.Nadezhda Ivanova1-0/+18
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Tue Jan 18 15:53:46 CET 2011 on sn-devel-104
2011-01-18s4-security: Fixed incorrect inheritance of IO flagged ACESNadezhda Ivanova1-0/+5
They should be inherited without the IO flag unless they contain generic information.
2011-01-18release-scripts: add build-htmlman-nogitMichael Adam1-0/+55
non-git version of a script to ease building of html version of manpages Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Jan 18 15:07:09 CET 2011 on sn-devel-104
2011-01-18release-scripts: add build-htmlman-gitMichael Adam1-0/+52
git version of a script to ease building of html version of manpages
2011-01-18release-scripts: add gpl header comment to build-manpages-nogitMichael Adam1-0/+14
2011-01-18release-scripts: add gpl header comment to build-manpages-gitMichael Adam1-0/+14
2011-01-18release-scripts: remove commented out line from git-versionMichael Adam1-2/+0
2011-01-18packaging/RHEL-CTDB: add the smbta-util manpageMichael Adam1-0/+1
2011-01-18packaging/RHEL-CTDB: add the pam_winbind.conf manpageMichael Adam1-0/+1
2011-01-18packaging/RHEL-CTDB: do not use an external docs tarball but build the manpagesMichael Adam2-15/+9
2011-01-18packaging/RHEL-CTDB: untangle the various %doc entries to single linesMichael Adam1-3/+10
2011-01-18docs: Remove template "itemizedlist/listitem" from man.xslMichael Adam1-60/+0
This seems to have been basically taken from the manpages/lists.xls from the docbook-xsl stylesheets. But it references a variable list-indent that older versions of docbook-xsl (e.g. 1.69) do not provide. This makes the manpage build break on older systems. Removing the definition lets the build succeed, using the system-definition of the itemizedlist/listitem. The diff between the docbook's (version 1.75.1) definition of itemizedlist/listitem and the definition in our man.xls is this: -- with this patch -- without this patch @@ -53,5 +53,7 @@ <!-- * seems to require the extra space. --> <xsl:call-template name="roff-if-end"/> <xsl:apply-templates/> - <xsl:text>.RE&#10;</xsl:text> + <xsl:if test=" following-sibling::listitem"> + <xsl:text>&#10;.RE&#10;</xsl:text> + </xsl:if> </xsl:template> I.e. the version of man.xsl made insertion if ".RE" conditional. I hope this does not break anything severely. The diff for e.g. the resulting winbindd.8 manpage is this: --- with this patch +++ witout this patch: @@ -375,7 +375,6 @@ \m[blue]\fBwinbind: rpc only\fR\m[] Setting this parameter forces winbindd to use RPC instead of LDAP to retrieve information from Domain Controllers\&. -.RE .SH "EXAMPLE SETUP" .PP To setup winbindd for user and group lookups plus authentication from a domain controller use something like the following setup\&. This was tested on an early Red Hat Linux box\&. Cheers
2011-01-18s4-gensec Extend python bindings for GENSEC and the associated testAndrew Bartlett3-28/+275
This now tests a real GENSEC exchange, including wrap and unwrap, using GSSAPI. Therefore, it now needs to access a KDC. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Jan 18 11:41:26 CET 2011 on sn-devel-104
2011-01-18s4-auth Extend python bindings to allow ldb and message to be specifiedAndrew Bartlett3-11/+61
This will allow for some more tokenGroups tests in future. Andrew Bartlett