summaryrefslogtreecommitdiff
path: root/lib/param
AgeCommit message (Collapse)AuthorFilesLines
2012-03-27s4 dns: Check smb.conf if we should allow recursionKai Blin1-0/+21
2012-03-04s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett2-7/+1
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-02-27s3-param: Align lp_{max,min}protocol with lib/param namesAndrew Bartlett1-0/+24
This adds an alisas to ensure that both our loadparm systems know all the names. I would like to move to the 'server ..' name as canonical, and this will be raised on the list. Andrew Bartlett
2012-02-07loadparm: handle P_SEP in switches (silences warning with clang).Jelmer Vernooij1-0/+5
2012-01-21param: handle P_BYTES in more placesAndrew Bartlett1-0/+1
2012-01-11lib/param: avoid talloc_reference() in copy_service()Stefan Metzmacher1-3/+3
The memory reduction compared of talloc_reference() over talloc_strdup() is typically very low. As the strings are typically short compared to the talloc header overhead. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 11 16:13:50 CET 2012 on sn-devel-104
2011-12-28gensec: Allow an alternate set of modules to be specifiedAndrew Bartlett1-1/+1
This will allow s3 to specify modules to use as a list, rather than needing to start the individual module with gensec_start_mech_by_ops() Andrew Bartlett
2011-12-22lib/param: add support for "SMB2_24" in smb.conf optionsStefan Metzmacher1-0/+1
metze
2011-12-22param: domain_logons and domain_master are of type enum_bool_autoAmitay Isaacs3-3/+3
These parameters should be defined as int and not bool. This fixes the test failures on big endian machines. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 10:37:42 CET 2011 on sn-devel-104
2011-12-22param: Fix the data type for bAvailableAmitay Isaacs1-1/+1
This causes the copy_service() to not copy bAvailable boolean on big endian machines causing tests to fail. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 05:30:49 CET 2011 on sn-devel-104
2011-12-17s4 dns: Allow updates based on smb.conf settingKai Blin3-0/+21
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sat Dec 17 04:19:40 CET 2011 on sn-devel-104
2011-12-16lib/param: Set s4 "host msdfs = true" by defaultAndrew Bartlett1-0/+2
This matches the s3 loadparm, and makes this feature available by default for our users in a DC environment. (This is needed for the correct operation of GPOs). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Dec 16 01:08:34 CET 2011 on sn-devel-104
2011-12-15loadparm: fixed service list handlingAndrew Tridgell1-14/+4
when you have: server services = +smb -s3fs and 'smb' is already in the list, then this should not be an error. This ensures that a config that specifically sets the services it wants doesn't generate an error if the service list being set happens to be the default
2011-12-08Add samba_kcc load parameterDave Craft1-0/+11
Configures parameter to enumerate name of python KCC topology generator for subsequent use by samba_runcmd_send() invocation from kcc task Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-20lib/param: add "SMB2_22" to enum_protocolStefan Metzmacher1-0/+1
metze
2011-11-17lib/param simplify server role values specified in smb.confAndrew Bartlett1-5/+1
The pdc/bdc split is only in smb.conf for Samba3 DCs, and so is too confusing to document in this paramter. It will be clearer to sort out "domain master" into a "pdc emulator" paramter to conver this distinction. Andrew Bartlett
2011-11-17param: use lp_is_security_and_server_role_valid()Andrew Bartlett1-5/+11
This also permits a few more valid combinations, due to the layer at which this is being used. Andrew Bartlett
2011-11-17param: Check if server role and security parameters are conflictingAmitay Isaacs2-0/+40
2011-11-17param: Connect lp_security to the lib/param code to allow testsAndrew Bartlett1-0/+10
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: Move enum values into a common (included) .c fileAndrew Bartlett2-81/+113
This #include hack is required as it is not possible to declare a compile-time sized array in a header file. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: move server role helpers into loadparm.hAndrew Bartlett4-33/+5
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: calculate server role from security, and security from server roleAndrew Bartlett4-7/+201
This allows smb.conf files from either the samba3 or samba4 tradition to come to the same value of server role, using the information in the smb.conf file. This is important so that tools like 'net getlocalsid' work against a Samba4 AD installation (yes, users have tried this). Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s3-param remove lp_domain_logons(), always use IS_DCAndrew Bartlett1-1/+1
This makes the code internally consistant. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: make server role list common and include auto (for the new default)Andrew Bartlett1-1/+9
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: Add "domain logons" and "domain master" parametersAmitay Isaacs1-0/+20
This makes parsing of config files with s3 loadparm code and s4 loadparm code consistent.
2011-11-08param: Remove duplicate initialization of 'share backend' parameterAmitay Isaacs1-2/+0
2011-11-03lib/param: use SMB_SIGNING_IF_REQUIRED instead of SMB_SIGNING_SUPPORTEDStefan Metzmacher1-6/+7
metze
2011-11-03lib/param: map "* signing = auto" to SMB_SIGNING_SUPPORTEDStefan Metzmacher1-1/+1
metze
2011-11-03s4:smb_server: change the default for "server signing" to "default"Stefan Metzmacher1-1/+1
metze
2011-11-03lib/param: change the default for "client signing" to "default"Stefan Metzmacher1-1/+2
metze
2011-10-20s4-dns: Added DCERPC dns server for DNS managementAmitay Isaacs1-1/+1
dnsserver.h - typedefs and prototypes dnsserver.c - RPC API and implementation methods dnsdb.c - samdb operations dnsdata.c - functions to manipulate dns structures dnsutils.c - function for serverinfo and zoneinfo structures Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-10-18lib/param: Remove parameters for wins and spoolss databasesAndrew Bartlett1-30/+0
This removes the smb.conf parameters per-database, replacing these with hard-coded database names in well known (and configurable) directories. The wins.ldb is now always in the "state dir", rather than being in both state and lock dir (ie, a bug). Less smb.conf parameters means less parameters to try and sync up between the loadparm subsystems. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 18 05:39:54 CEST 2011 on sn-devel-104
2011-10-18credentials: Prioritise command-line specified options above defaults from ↵Andrew Bartlett2-0/+22
smb.conf If a user specified -W or --realm on the command line, then this is of level SPECIFIED, not UNINITIALISED, despite it going via the loadparm system. This helps us to ensure that -W server -Ulocaluser is parsed the same as -Userver\localuser. This matters as otherwise we might instead attempt to use kerberos to the realm from the smb.conf. Andrew Bartlett
2011-10-13lib/param reduce the cost of loadparm_init_s3()Andrew Bartlett1-1/+1
The parameter redirection covers most things now, so this should be safe. Andrew Bartlett
2011-10-13lib/param Print error when mkdir of lock path failsAndrew Bartlett1-1/+3
This matches the s3 code for lock_path(). Andrew Bartlett
2011-10-13lib/param Add 'use mmap' parameter to control tdb use of mmapAndrew Bartlett1-0/+12
2011-10-11s4/param: Expose lpcfg_smb_ports and lpcfg_socket_options, which are both ↵Jelmer Vernooij1-0/+1
required by winexe.
2011-10-11param: Expose lpcfg_smb_ports, required by winexe.Jelmer Vernooij1-0/+1
2011-10-11lib/param: fix typo _SAMBA_BUILD => _SAMBA_BUILD_ causing segfaultsStefan Metzmacher1-1/+1
If lpcfg_dns_update_command() returns NULL 'samba' segfaults on startup. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Oct 11 17:25:19 CEST 2011 on sn-devel-104
2011-10-11lib/param Avoid dyn_ defines that are not provided by the autoconf buildAndrew Bartlett1-3/+5
The autoconf build will never use these parameters or load the smb.conf with these defaults, so the defaults are not important. Andrew Bartlett
2011-10-11lib/param Use strcasecmp_m rather than strcasecmp as this is banned in the ↵Andrew Bartlett1-2/+2
s3 includes.h
2011-10-11lib/param Use talloc_strdup rather than strdup as strdup is banned in the s3 ↵Andrew Bartlett1-3/+3
includes.h
2011-10-11lib/param Avoid the name string_set as this is already used in the s3 param codeAndrew Bartlett1-14/+14
2011-10-11lib/param Avoid the use of the name service_ok() which is used in the s3 ↵Andrew Bartlett1-4/+4
param code
2011-10-11lib/param: Remove unused #include of lib/socket/socket.hAndrew Bartlett1-1/+0
2011-10-11libcli/smb Move CSC_POLICY_* definition to smb_constants.hAndrew Bartlett1-6/+0
This removes the duplicate definition between smb.h and lib/param/loadparm.c which in turn allows this file to be compiled with the s3 includes.h Andrew Bartlett
2011-10-11lib/param move source4 param code to the top levelAndrew Bartlett6-0/+4652
This is done so that the lpcfg_ functions are available across the whole build, either with the struct loadparm_context loaded from an smb.conf directly or as a wrapper around the source3 param code. This is not the final, merged loadparm, but simply one step to make it easier to solve other problems while we make our slow progress on this difficult problem. Andrew Bartlett
2011-07-08lib/param: Merge struct loadparm_service into commonAndrew Bartlett4-16/+160
This is handled by a common header and a .c file that is included into both loadparm.c files. In the process, _lp functions were renamed to lp__ to allow the common function definition declarations to be used by source3 and source4 (which have different macro definitions). The only parameter to change type is 'strict_locking' which was a bool, and is now an int, to accommodate the 'Auto' value from source3. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jul 8 12:35:56 CEST 2011 on sn-devel-104
2011-07-08s3-param use common struct parmlist_entry to hold parametric optionsAndrew Bartlett1-1/+2
This will allow struct loadparm_service to be shared in future. Andrew Bartlett
2011-07-08param: Move per-share parameters into a seperate file, to share with s3Andrew Bartlett2-0/+36
This will allow the struct loadparm_service to be in common between the two loadparm implementations in the tree. Andrew Bartlett
generated by cgit (git 2.34.1) at 2024-06-26 15:50:38 +0000