Age | Commit message (Collapse) | Author | Files | Lines |
|
(rant off :-). Inspired by work from Benjamin Riefenstahl <Benjamin.Riefenstahl@epost.de>.
Also add MacOSX/Darwin configure fixes.
Jerry - can we put this in 3.0 release ? :-).
Jeremy.
(This used to be commit f23acb4ca5feac8ad2acfa1baf7df31283aba3ea)
|
|
(This used to be commit 424b13823b666c122f43d63098cec3e54b4fa353)
|
|
to build on systems with fixed getgrouplist() in GNU libc < 2.3.2.
Unfortunately, we can't detect correctness of getgrouplist() functioning in
portable way so this is left up to developer/packager.
This patch adds --with-good-getgrouplist[=no] switch to configure which packagers
on Linux platforms could use to specify in their own builds if they now that glibc
on their platform is fixed w.r.t CAN-2003-0689. By default we still think that glibc
is vulnerable and perform our version check.
** This patch does not change default behaviour in Samba 3.0 -- by default we are not
vulnerable on glibc as we are not using getgrouplist()
See http://www.securityfocus.com/bid/8477 for vulnerability description.
Right now there are following Linux vendors released glibc updates for CAN-2003-0689:
RedHat -- https://rhn.redhat.com/errata/RHSA-2003-249.html
ALTLinux -- http://www.altlinux.com/index.php?module=sisyphus&package=glibc
(This used to be commit e53622c114e0368515c50b357567fcdd0b95979e)
|
|
(This used to be commit 7f2533207ee46fa968cf1fd31ac0cd89e1fb0bb1)
|
|
library variable names.
(This used to be commit 9b0b0256a8bb93482fad4032902a4ab6d1e99e23)
|
|
This implements some kind of improved AFS support for Samba on Linux with
OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have
OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile
into secrets.tdb with 'net afskey'. If this is done, on each tree connect
smbd creates a Kerberos V4 ticket suitable for use by the AFS client and
gives it to the kernel via the AFS syscall. This is meant to be very
light-weight, so I did not link in a whole lot of libraries to be more
platform-independent using the ka_SetToken function call.
Volker
(This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
|
|
find libpam or security/pam_appl.h
Also change the warnings when we can't do --with-pam_smbpass when
is was requested to errors.
(This used to be commit fe3fb58623c27472d54722b780af43c3e272abaf)
|
|
found.
(This used to be commit dc43c2dd1b4cd02e996fe10f1684a6571b2fd3de)
|
|
to a very recent snapshot) has arcfour-hmac code that doesn't work with
windows. Love suggested detecting it via the existence of KEYTYPE_ARCFOUR_56
which only exists in working versions.
(This used to be commit e039a61e51c50a1999ed8e375c4d5df8b622e310)
|
|
work properly. MIT does not support them, so this check will be used to
decide whether to use them. First part of fixing bug #372.
(This used to be commit 85737fc9371d8208f3dd55d408958e357c48266e)
|
|
nsswitch/pam_winbind.h so we can compile properly on this platform.
(This used to be commit 75411005fcab7ecf31940c5f7b87fd407166f98a)
|
|
Now all 8-bit charsets with gaps (not all symbols defined) could be produced through
one macro -- SMB_GENERATE_CHARSET_MODULE_8_BIT_GAP(CHARSETNAME) within source file
with three charset tables. Full source code for such modules can be generated by
source/script/gen-8bit-gap.sh script which was taken from GNU libc and changed slightly
to follow our data types and structure.
(This used to be commit 37042c7bc0f349370e93e4bed37d8fa371013247)
|
|
pam_smbpass.so will load ok. Had to move some functions around to work
around dependency problems (hence the new passdb/lookup_sid.c)
Also make sure that libsmbclient.a is built and installed when
we support shared libraries.
(This used to be commit 780055f4422f11fb0524ac1f003cdc5f317f8b19)
|
|
in heimdal it is an enum. Thanks to Guenther Deschner (gd@suse.de).
With this join will work, but without a keytab, cifs connections will still
fail with heimdal. Fix to come later.
(This used to be commit d30bef4c37e8203c273eb3852215a89348bece7a)
|
|
CAP-compatible encoded file names for CJKV
(This used to be commit e8a5a962ed2218144cbb9c593d8e996c7d034b0c)
|
|
the checks for shared library support (move the IRIX define as well)
(This used to be commit 42d9b75d8c6ab61afd3b399ab485da6733af5bd2)
|
|
(This used to be commit 302da352a2f7f23c39ab97076505b5297ffdbe8d)
|
|
appear. (-:
I've closed bug 355 as a duplicate of bug 230 which is still a going
concern.
(This used to be commit dfb5050b7732836ade12beba27a88c5e8c1a1b95)
|
|
vendor supplied lp printing (bug #355).
For some reason this is not being set in Samba 3. In Samba 2.2 the
SYSV define was only set from include/includes.h in a haphazard
fashion. It's probably better to explicitly define it on a per-operating
system basis anyway.
(This used to be commit e653e13f45c3fa3c2cac792d78e47a2ee0df2b5a)
|
|
We now fallback to Samba-provided CP850 charset module if CP850 or IBM850 does not exist on target system at runtime.
1. Introduce CP850 charset module based on charmaps table from GNU libc 2.2.5
2. Make CP850 charset module shared and build it by default
Should fix Solaris run-time
(This used to be commit e855dc8c9115fa11d315eb34d57722ff612daa11)
|
|
smbadduser must obeys the paths from configure options
* Try to get libsmbclient files installed during 'make install'
Still one outstanding problem with static lib. INSTALLCLIENTCMD_A
is not getting set correctly.
(This used to be commit 50ab28bd2524187b851732176553382fb811a051)
|
|
(This used to be commit f4e47012ff9704d85e017bfbc0b13030e8f5dee8)
|
|
the platform. This allows to compile and complain about it at runtime
(This used to be commit b6fa581955de36e044a41c6ce857743c7e3c9b7f)
|
|
places and negative result does not mean we don't have iconv unless we checked everything
(This used to be commit d46f8325f2edad28870d7a5c45674bdb52ac08e4)
|
|
Now we are:
1. Try to find correct name for default character sets for the platform
2. Use DEFAULT_{DOS|DISPLAY|UNIX}_CHARSET defines set during configure phase as defaults
This should fix CP850 problem on Solaris (at least) because it actually has IBM850 which
is the same but under different name
(This used to be commit 836b9fffa0eadc818019ba36ed764e97d4f9a801)
|
|
(This used to be commit 071850f87ac1c54cbb9786b5d443f6067c923663)
|
|
after the Makefile changes.
(This used to be commit 104f62272d75e9d89ab330b620011b337eb2a435)
|
|
(This used to be commit a93fa23c17c9f69de224cdd5471916eda3cd4fec)
|
|
There is a workaround documented in the bug report.
This patch does:
* add server support for the LSA_DS UUID on the lsarpc pipe
* store a list of context_ids/api_structs in the pipe_struct
so that we don't have to lookup the function table for a pipe.
We just match the context_id. Note that a dce/rpc alter_context
does not destroy the previous context so it is possible to
have multiple bindings active on the same pipe. Observed from
standalone win2k sp4 client.
* added server code for DsROleGetPrimaryDOmainInfo() but disabled it
since it causes problems enumerating users and groups from a 2ksp4
domain member in a Samba domain.
(This used to be commit 96bc2abfcb0dd0912696fad76e43cb217b33e061)
|
|
(This used to be commit 772bb41a9d321c7f7377af01d1583c73fccb1e08)
|
|
(This used to be commit ee362ce47596a90f60b0dd3b414503547863e01b)
|
|
of LIBS where we don't need to change them, and to ensure that if
--with-iconv was specified we only search the list of locations specified.
(This used to be commit c2274274a6cec7aed5ba5fee72e529ff3e0c71e0)
|
|
because Samba really only needs CP850 to UTF-8 and ISO-8859-1 seems to be
much the same as 8859.
(This used to be commit 02e3d779f150f99e777007a50b58861c8921925b)
|
|
then IBM850 and lastly ISO-8859-1.
(This used to be commit df8ff3f6b54aca4e43459d4275c88b90508c961a)
|
|
in an iconv_open to be more robust.
However, what we really want to do is find the name for something like CP850,
which can be IBM850 on Solaris, and we might want to also check for
ISO-8859-1.
So, this commit adds a macro to aclocal.m4 that can check for a specific
charset.
(This used to be commit 81dc28ca82b94d1bc42f96273f6cefac6ca1848c)
|
|
loop that looks for iconv, because we might have more than one version
of iconv available and the first version might not work like we want, so
we have to keep looking.
We have yet to look for other character conversions as well, but for now,
let's see what the build farm makes of the changes.
(This used to be commit 13be2ca51a6125a6de22fa7afb88ba0688f23ab8)
|
|
a share based on a specified start and end dates according to date(1) format
(This used to be commit 8b263c2fda89ff6aa2dc3a60460c5d46cf0814c6)
|
|
(This used to be commit 90cbc4361e86d591e38c80092612edaa3875ea67)
|
|
(This used to be commit ea57a57db036de6245ff44cd953dae3b482b4744)
|
|
(This used to be commit 4644085b682c806796f9acf2ed73de9dd9872738)
|
|
thinks of it.
(This used to be commit e6210295e4daa5f1768616b4d8390a173c5c67ae)
|
|
sysquotas interface detected (Linux at least) using native Windows tools. Also move default quota support for NT quotas to VFS module default_quota. Code by Metze
(This used to be commit e856a96c2c42c39843e5e1a3a6b0d538e7179900)
|
|
Tested on a large combination of operating systems and versions.
Hopefully the build farm will find any remaining nasties if they
exist.
(This used to be commit 2e42fa3d7217615d90ad64261513bd1e8a65f535)
|
|
This segfaults when you have to many group membership entries
in /etc/group.
Fixed in glibc CVS end of April 2003.
Volker
(This used to be commit 61bfdf0b12457689b08c19a6269259abf3d15410)
|
|
Jeremy.
(This used to be commit dd46f8b22d6e8411081a1279e1cd32929e40370b)
|
|
automatic option generation for spec files
(This used to be commit 4042d965f26d8cc056792df50d0a2a6f3f640e50)
|
|
define it in SHLD for those systems the use CC for SHLD.
(This used to be commit d0e2f3d1098ac0b8fa9165b3a93cd8d325a7a0d9)
|
|
This has been tested on RedHat 9.0 with libiconv built in as well as
FreeBSD 4.6.2 with iconv-2.0.3 and biconv.g/libbiconv.
We should perhaps also check for other conversions that just ASCII<-->UCS-2LE
especially because those two names do not appear in charset.aliases for
iconv-2.0.3.
(This used to be commit 53d953da10dbfaf778907f19115e127c5aac1da8)
|
|
winbindd now. Also removing an unused file.
(This used to be commit 688369c23c604e9b6654fcf07190d2e27c1138cf)
|
|
summary as suggested by abartlet.
(This used to be commit 7b2c6181b17a0d62043569ffa49cdf6c5b0b6859)
|