summaryrefslogtreecommitdiff
path: root/lib/param
AgeCommit message (Collapse)AuthorFilesLines
2012-06-25lib/param: add "SMB3" as alias for PROTOCOL_SMB3_00Stefan Metzmacher1-0/+1
metze
2012-06-18lib/param: add missing prototype of lpcfg_parm_long()Stefan Metzmacher1-0/+3
metze
2012-06-16s4-lib/param: FLAG DAY for the default FILE SERVERAndrew Bartlett1-2/+2
This commit changes the default file server to be s3fs. Existing installs wishing to keep the ntvfs file server need to set this in their smb.conf: server services = +smb -s3fs dcerpc endpoint services = +winreg +srvsvc Andrew Bartlett
2012-06-15s3-build: Do not write loadparm generated files into the build treeAndrew Bartlett2-4/+4
We need to keep these files away from where waf might see them. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jun 15 11:10:14 CEST 2012 on sn-devel-104
2012-06-15lib/param: Use server role = 'standalone server' to be consistant with ↵Andrew Bartlett1-0/+1
member server standalne is left as an alias. Andrew Bartlett
2012-06-15lib/param: make security=domain and security=ads conflict with being a DCAndrew Bartlett1-18/+2
This simplifies our supported configurations down to those that we test and expect to work. security=domain and domain logons = yes has never made much sense, and security=ads and domain logons = yes was only ever used in early experiments for our AD support using smbd. The correct way to be an AD DC is to set "server role = active directory domain controller" Andrew Bartlett
2012-06-15lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett3-5/+9
controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
2012-06-11lib/param: simplfy lp_find_security()Andrew Bartlett1-5/+0
All the roles other than ROLE_DOMAIN_MEMBER map to SEC_USER. Andrew Bartlett
2012-05-30lib/param: Put common FN_ macros into param_functions.cAndrew Bartlett3-256/+257
This will in turn make it possible to put the actual parameter definitions in common. Andrew Bartlett
2012-05-30lib/param: Add a few more s3 parametersAndrew Bartlett1-0/+4
2012-05-30lib/param: Import s3 parameters into lib/param to allow the parameter lists ↵Andrew Bartlett1-0/+164
merge This will allow us to create just one list of the FN_ macros, included into both parameter systems. This will in turn allow the actual parameter definitions to be merged in a similar way. Andrew Bartlett
2012-05-30lib/param: Mark a few more parameters const (matching s3)Andrew Bartlett1-12/+13
While this makes no difference in the lib/param code, this allows the C files to be compared and merged. Andrew Bartlett
2012-05-30param: mark realm parameter as constAndrew Bartlett1-1/+1
2012-05-30param: Sort global param functions macros to ease the s3/s4 mergeAndrew Bartlett1-81/+78
This makes it easier to them merge these two function lists without changing the meaning of the output. Andrew Bartlett
2012-05-30lib/param: Add .flags to max/min protocol to match s3Andrew Bartlett1-4/+8
This reduces the difference in the parameter tables. Andrew Bartlett
2012-05-30lib/param: Add .flags to wins parameters to match s3Andrew Bartlett1-2/+4
This reduces the difference in the parameter tables. Andrew Bartlett
2012-05-30lib/param: Harmonise 'password server' parameter between s3 and s4Andrew Bartlett1-3/+3
2012-05-15s3-auth: remove "security=server" (depricated since 3.6)Stefan Metzmacher2-9/+1
"security=server" has a lot of problems in the world with modern security (ntlmv2 and krb5). It was also not very reliable, as it needed a stable connection to the password server for the lifetime of the whole client connection! Please use "security=domain" or "security=ads" is you authentication against remote servers (domain controllers). metze -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SERVER | | security=server | | | | | | 12 May | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-05-06lib/param: add support for "SMB3_00"Stefan Metzmacher1-0/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun May 6 16:38:00 CEST 2012 on sn-devel-104
2012-04-19loadparm: Add helper function to fetch default lifetime policiesSimo Sorce2-0/+24
This use long to fetch time_t quantities, because there are architectures were time_t is a signed long but long != int, So long is the proper way to deal with it.
2012-04-19loadparm: Add convenience function to return long integersSimo Sorce1-0/+25
2012-04-19loadparm: Fix broken lp_ulong utility functionSimo Sorce1-2/+2
2012-04-19Move README file in the right place.Simo Sorce1-0/+4
Someone forgot to move the README when they moved the code ...
2012-04-16param: harmonise wins parametersAndrew Bartlett1-8/+8
2012-04-16lib/param: swap preferred name for 'lock dir' to match s3Andrew Bartlett1-2/+2
2012-04-16param: Merge common param elements by adding .flagsAndrew Bartlett1-40/+80
This removes the difference between many of the key elements of the global parameters table, and makes it easier to merge the two tables. Andrew Bartlett
2012-04-16param: harmonsise logfile parameterAndrew Bartlett1-1/+2
2012-04-16param: Merge common param elements by adding .flagsAndrew Bartlett1-17/+34
This removes the difference between many of the key elements of the global parameters table, and makes it easier to merge the two tables. Andrew Bartlett
2012-04-11s3:param convert kernel oplocks to share parameterChristian Ambach1-0/+1
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-03-27s4 dns: Check smb.conf if we should allow recursionKai Blin1-0/+21
2012-03-04s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett2-7/+1
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-02-27s3-param: Align lp_{max,min}protocol with lib/param namesAndrew Bartlett1-0/+24
This adds an alisas to ensure that both our loadparm systems know all the names. I would like to move to the 'server ..' name as canonical, and this will be raised on the list. Andrew Bartlett
2012-02-07loadparm: handle P_SEP in switches (silences warning with clang).Jelmer Vernooij1-0/+5
2012-01-21param: handle P_BYTES in more placesAndrew Bartlett1-0/+1
2012-01-11lib/param: avoid talloc_reference() in copy_service()Stefan Metzmacher1-3/+3
The memory reduction compared of talloc_reference() over talloc_strdup() is typically very low. As the strings are typically short compared to the talloc header overhead. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 11 16:13:50 CET 2012 on sn-devel-104
2011-12-28gensec: Allow an alternate set of modules to be specifiedAndrew Bartlett1-1/+1
This will allow s3 to specify modules to use as a list, rather than needing to start the individual module with gensec_start_mech_by_ops() Andrew Bartlett
2011-12-22lib/param: add support for "SMB2_24" in smb.conf optionsStefan Metzmacher1-0/+1
metze
2011-12-22param: domain_logons and domain_master are of type enum_bool_autoAmitay Isaacs3-3/+3
These parameters should be defined as int and not bool. This fixes the test failures on big endian machines. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 10:37:42 CET 2011 on sn-devel-104
2011-12-22param: Fix the data type for bAvailableAmitay Isaacs1-1/+1
This causes the copy_service() to not copy bAvailable boolean on big endian machines causing tests to fail. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 05:30:49 CET 2011 on sn-devel-104
2011-12-17s4 dns: Allow updates based on smb.conf settingKai Blin3-0/+21
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sat Dec 17 04:19:40 CET 2011 on sn-devel-104
2011-12-16lib/param: Set s4 "host msdfs = true" by defaultAndrew Bartlett1-0/+2
This matches the s3 loadparm, and makes this feature available by default for our users in a DC environment. (This is needed for the correct operation of GPOs). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Dec 16 01:08:34 CET 2011 on sn-devel-104
2011-12-15loadparm: fixed service list handlingAndrew Tridgell1-14/+4
when you have: server services = +smb -s3fs and 'smb' is already in the list, then this should not be an error. This ensures that a config that specifically sets the services it wants doesn't generate an error if the service list being set happens to be the default
2011-12-08Add samba_kcc load parameterDave Craft1-0/+11
Configures parameter to enumerate name of python KCC topology generator for subsequent use by samba_runcmd_send() invocation from kcc task Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-20lib/param: add "SMB2_22" to enum_protocolStefan Metzmacher1-0/+1
metze
2011-11-17lib/param simplify server role values specified in smb.confAndrew Bartlett1-5/+1
The pdc/bdc split is only in smb.conf for Samba3 DCs, and so is too confusing to document in this paramter. It will be clearer to sort out "domain master" into a "pdc emulator" paramter to conver this distinction. Andrew Bartlett
2011-11-17param: use lp_is_security_and_server_role_valid()Andrew Bartlett1-5/+11
This also permits a few more valid combinations, due to the layer at which this is being used. Andrew Bartlett
2011-11-17param: Check if server role and security parameters are conflictingAmitay Isaacs2-0/+40
2011-11-17param: Connect lp_security to the lib/param code to allow testsAndrew Bartlett1-0/+10
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: Move enum values into a common (included) .c fileAndrew Bartlett2-81/+113
This #include hack is required as it is not possible to declare a compile-time sized array in a header file. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: move server role helpers into loadparm.hAndrew Bartlett4-33/+5
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>