summaryrefslogtreecommitdiff
path: root/lib/param
AgeCommit message (Collapse)AuthorFilesLines
2012-06-18lib/param: add missing prototype of lpcfg_parm_long()Stefan Metzmacher1-0/+3
metze
2012-06-16s4-lib/param: FLAG DAY for the default FILE SERVERAndrew Bartlett1-2/+2
This commit changes the default file server to be s3fs. Existing installs wishing to keep the ntvfs file server need to set this in their smb.conf: server services = +smb -s3fs dcerpc endpoint services = +winreg +srvsvc Andrew Bartlett
2012-06-15s3-build: Do not write loadparm generated files into the build treeAndrew Bartlett2-4/+4
We need to keep these files away from where waf might see them. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jun 15 11:10:14 CEST 2012 on sn-devel-104
2012-06-15lib/param: Use server role = 'standalone server' to be consistant with ↵Andrew Bartlett1-0/+1
member server standalne is left as an alias. Andrew Bartlett
2012-06-15lib/param: make security=domain and security=ads conflict with being a DCAndrew Bartlett1-18/+2
This simplifies our supported configurations down to those that we test and expect to work. security=domain and domain logons = yes has never made much sense, and security=ads and domain logons = yes was only ever used in early experiments for our AD support using smbd. The correct way to be an AD DC is to set "server role = active directory domain controller" Andrew Bartlett
2012-06-15lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett3-5/+9
controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
2012-06-11lib/param: simplfy lp_find_security()Andrew Bartlett1-5/+0
All the roles other than ROLE_DOMAIN_MEMBER map to SEC_USER. Andrew Bartlett
2012-05-30lib/param: Put common FN_ macros into param_functions.cAndrew Bartlett3-256/+257
This will in turn make it possible to put the actual parameter definitions in common. Andrew Bartlett
2012-05-30lib/param: Add a few more s3 parametersAndrew Bartlett1-0/+4
2012-05-30lib/param: Import s3 parameters into lib/param to allow the parameter lists ↵Andrew Bartlett1-0/+164
merge This will allow us to create just one list of the FN_ macros, included into both parameter systems. This will in turn allow the actual parameter definitions to be merged in a similar way. Andrew Bartlett
2012-05-30lib/param: Mark a few more parameters const (matching s3)Andrew Bartlett1-12/+13
While this makes no difference in the lib/param code, this allows the C files to be compared and merged. Andrew Bartlett
2012-05-30param: mark realm parameter as constAndrew Bartlett1-1/+1
2012-05-30param: Sort global param functions macros to ease the s3/s4 mergeAndrew Bartlett1-81/+78
This makes it easier to them merge these two function lists without changing the meaning of the output. Andrew Bartlett
2012-05-30lib/param: Add .flags to max/min protocol to match s3Andrew Bartlett1-4/+8
This reduces the difference in the parameter tables. Andrew Bartlett
2012-05-30lib/param: Add .flags to wins parameters to match s3Andrew Bartlett1-2/+4
This reduces the difference in the parameter tables. Andrew Bartlett
2012-05-30lib/param: Harmonise 'password server' parameter between s3 and s4Andrew Bartlett1-3/+3
2012-05-15s3-auth: remove "security=server" (depricated since 3.6)Stefan Metzmacher2-9/+1
"security=server" has a lot of problems in the world with modern security (ntlmv2 and krb5). It was also not very reliable, as it needed a stable connection to the password server for the lifetime of the whole client connection! Please use "security=domain" or "security=ads" is you authentication against remote servers (domain controllers). metze -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SERVER | | security=server | | | | | | 12 May | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-05-06lib/param: add support for "SMB3_00"Stefan Metzmacher1-0/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun May 6 16:38:00 CEST 2012 on sn-devel-104
2012-04-19loadparm: Add helper function to fetch default lifetime policiesSimo Sorce2-0/+24
This use long to fetch time_t quantities, because there are architectures were time_t is a signed long but long != int, So long is the proper way to deal with it.
2012-04-19loadparm: Add convenience function to return long integersSimo Sorce1-0/+25
2012-04-19loadparm: Fix broken lp_ulong utility functionSimo Sorce1-2/+2
2012-04-19Move README file in the right place.Simo Sorce1-0/+4
Someone forgot to move the README when they moved the code ...
2012-04-16param: harmonise wins parametersAndrew Bartlett1-8/+8
2012-04-16lib/param: swap preferred name for 'lock dir' to match s3Andrew Bartlett1-2/+2
2012-04-16param: Merge common param elements by adding .flagsAndrew Bartlett1-40/+80
This removes the difference between many of the key elements of the global parameters table, and makes it easier to merge the two tables. Andrew Bartlett
2012-04-16param: harmonsise logfile parameterAndrew Bartlett1-1/+2
2012-04-16param: Merge common param elements by adding .flagsAndrew Bartlett1-17/+34
This removes the difference between many of the key elements of the global parameters table, and makes it easier to merge the two tables. Andrew Bartlett
2012-04-11s3:param convert kernel oplocks to share parameterChristian Ambach1-0/+1
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-03-27s4 dns: Check smb.conf if we should allow recursionKai Blin1-0/+21
2012-03-04s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett2-7/+1
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-02-27s3-param: Align lp_{max,min}protocol with lib/param namesAndrew Bartlett1-0/+24
This adds an alisas to ensure that both our loadparm systems know all the names. I would like to move to the 'server ..' name as canonical, and this will be raised on the list. Andrew Bartlett
2012-02-07loadparm: handle P_SEP in switches (silences warning with clang).Jelmer Vernooij1-0/+5
2012-01-21param: handle P_BYTES in more placesAndrew Bartlett1-0/+1
2012-01-11lib/param: avoid talloc_reference() in copy_service()Stefan Metzmacher1-3/+3
The memory reduction compared of talloc_reference() over talloc_strdup() is typically very low. As the strings are typically short compared to the talloc header overhead. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 11 16:13:50 CET 2012 on sn-devel-104
2011-12-28gensec: Allow an alternate set of modules to be specifiedAndrew Bartlett1-1/+1
This will allow s3 to specify modules to use as a list, rather than needing to start the individual module with gensec_start_mech_by_ops() Andrew Bartlett
2011-12-22lib/param: add support for "SMB2_24" in smb.conf optionsStefan Metzmacher1-0/+1
metze
2011-12-22param: domain_logons and domain_master are of type enum_bool_autoAmitay Isaacs3-3/+3
These parameters should be defined as int and not bool. This fixes the test failures on big endian machines. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 10:37:42 CET 2011 on sn-devel-104
2011-12-22param: Fix the data type for bAvailableAmitay Isaacs1-1/+1
This causes the copy_service() to not copy bAvailable boolean on big endian machines causing tests to fail. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 05:30:49 CET 2011 on sn-devel-104
2011-12-17s4 dns: Allow updates based on smb.conf settingKai Blin3-0/+21
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sat Dec 17 04:19:40 CET 2011 on sn-devel-104
2011-12-16lib/param: Set s4 "host msdfs = true" by defaultAndrew Bartlett1-0/+2
This matches the s3 loadparm, and makes this feature available by default for our users in a DC environment. (This is needed for the correct operation of GPOs). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Dec 16 01:08:34 CET 2011 on sn-devel-104
2011-12-15loadparm: fixed service list handlingAndrew Tridgell1-14/+4
when you have: server services = +smb -s3fs and 'smb' is already in the list, then this should not be an error. This ensures that a config that specifically sets the services it wants doesn't generate an error if the service list being set happens to be the default
2011-12-08Add samba_kcc load parameterDave Craft1-0/+11
Configures parameter to enumerate name of python KCC topology generator for subsequent use by samba_runcmd_send() invocation from kcc task Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-20lib/param: add "SMB2_22" to enum_protocolStefan Metzmacher1-0/+1
metze
2011-11-17lib/param simplify server role values specified in smb.confAndrew Bartlett1-5/+1
The pdc/bdc split is only in smb.conf for Samba3 DCs, and so is too confusing to document in this paramter. It will be clearer to sort out "domain master" into a "pdc emulator" paramter to conver this distinction. Andrew Bartlett
2011-11-17param: use lp_is_security_and_server_role_valid()Andrew Bartlett1-5/+11
This also permits a few more valid combinations, due to the layer at which this is being used. Andrew Bartlett
2011-11-17param: Check if server role and security parameters are conflictingAmitay Isaacs2-0/+40
2011-11-17param: Connect lp_security to the lib/param code to allow testsAndrew Bartlett1-0/+10
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: Move enum values into a common (included) .c fileAndrew Bartlett2-81/+113
This #include hack is required as it is not possible to declare a compile-time sized array in a header file. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: move server role helpers into loadparm.hAndrew Bartlett4-33/+5
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: calculate server role from security, and security from server roleAndrew Bartlett4-7/+201
This allows smb.conf files from either the samba3 or samba4 tradition to come to the same value of server role, using the information in the smb.conf file. This is important so that tools like 'net getlocalsid' work against a Samba4 AD installation (yes, users have tried this). Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
generated by cgit (git 2.34.1) at 2024-11-03 01:46:18 +0000