Age | Commit message (Collapse) | Author | Files | Lines |
|
domains, this patch ensures that we always use the ADS backend when
security=ADS, and the remote server is capable.
The routines used for this behaviour have been upgraded to modern Samba
codeing standards.
This is a change in behaviour for mixed mode domains, and if the trusted
domain cannot be reached with our current krb5.conf file, we will show
that domain as disconnected.
This is in line with existing behaviour for native mode domains, and for
our primary domain.
As a consequence of testing this patch, I found that our kerberos error
handling was well below par - we would often throw away useful error
values. These changes move more routines to ADS_STATUS to return
kerberos errors.
Also found when valgrinding the setup, fix a few memory leaks.
While sniffing the resultant connections, I noticed we would query our
list of trusted domains twice - so I have reworked some of the code to
avoid that.
Andrew Bartlett
(This used to be commit 7c34de8096b86d2869e7177420fe129bd0c7541d)
|
|
FreeBSD winbindd.
Jeremy.
(This used to be commit 7c4d52014e4432c9bd430a8885f0c314312002d5)
|
|
Jeremy.
(This used to be commit cae5f158e583572436a2f4c20d919816d763f93d)
|
|
Volker
(This used to be commit 50be537b19dc6a4c63a58b9c73e6ad354b7c0d89)
|
|
(This used to be commit 134cf1d546cc46c8a907205ee7be7593cbb524b6)
|
|
2.2.x quota methods.
:-).
"here's a patch which ports the samba 2.2 samba_linux_quota.h stuff to 3_0.
This is needed because of so many broken quota files outthere.
Please, test this with old, new kernels
(strucr dqblk, struct mem_dqblk, and struct if_dqblk)
, quota.user, aquota.user formats
what is when a user is over soft quota and over hard quotas..."
Jeremy.
(This used to be commit 4350aa6ce6cfdaf71cdcfd2aebcdc9560fa7efcf)
|
|
- Add pgSQL backend (based on patch by Hamish Friedlander)
- Use query generate functions from pdb_mysql and pdb_pgsql
- Only pdb_pgsql.c needs to be changed whenever the fields in SAM_ACCOUNT change
(This used to be commit 65ad2c02fd2bf36d535c279ad290ab81e39f6816)
|
|
Jeremy.
(This used to be commit 05afc340862c3c7caeb9ede74ea1e9a57ee937ae)
|
|
--with-fhs macro
(This used to be commit 58b97b91da409a299bf7dd97bc375479f65dba18)
|
|
gschafer@zip.com.au (Greg Schafer).
Jeremy.
(This used to be commit 583b96e867d2c2cafbfa9d03f33402d6d9d44191)
|
|
Jeremy.
(This used to be commit 1ae1987a002716e8aa0d4bc0dd68f580ad762e47)
|
|
(This used to be commit 8f6cd36fa03edf75e8e3a806ab178d8563dea081)
|
|
Let the build farm chew on it for a bit.
(This used to be commit 41e4b036dff0af7be69bf95ea3d64dfccd3a4b8e)
|
|
MacOSX (Darwin) specific charset module code. Also had to add AC_CHECK_CPP
to configure.in (this took a *long* time to track down) to make autoconf
work correctly on Fedora Core 1.
Jeremy.
(This used to be commit c51d974b18e31a38608a3837d3fee04a209f91c8)
|
|
(This used to be commit e079c8842a24ff4f50483bea8ca6b11db4b2dc99)
|
|
to LDFLAGS. One of the problems with configure/autoconf is that there seems
to be no separation of LDLFAGS etc in configure from the LDFLAGS it is
building for the Makefile.
(This used to be commit 63d7698208a0fc4dfd2e3158f5ccbb1b6d9a6baf)
|
|
that don't have such support in glibc.
(This used to be commit de6d5f1d1025bec8991944060df50eb2602f7221)
|
|
(This used to be commit 486f495ea7decb4abfdb4751ae124b036f3e5d16)
|
|
(This used to be commit d3af6b443d9f52b007a1c022908d767edf238b9e)
|
|
as well.
(This used to be commit 44be80e4883c8578b98ec02ac422c97229b063c5)
|
|
files; will watch the build farm on this to make sure things don't blow up
(This used to be commit e92583cecd79adea25caedd1599ac8f36733a923)
|
|
autoconf-2.53 on SLES8 does not correctly find the keyblock.
Volker
(This used to be commit c4f36a250a5126dac0d2f6d395d75a2437c8e56d)
|
|
the command line argument being called isn't valid.
(This used to be commit d43922eade02d1826a108b45607f5776266fd05b)
|
|
(This used to be commit 6917391fbbe90fd7f854d05e18f4ceb23c68d78a)
|
|
Jeremy.
(This used to be commit ce1024cc10e798d4ed3bc7f6358bc4ebe9737830)
|
|
to see if SGI and other platforms will build.
(This used to be commit cf9311044c372695592db1b95b814b0870b8cf29)
|
|
and lib/snprintf. Check for va_copy first, and then look for __va_copy.
(This used to be commit 8b592740b6294555c461d7eee003e2bd5f4352a4)
|
|
(This used to be commit 3daefe9d17fb2c7b1c4d21593465e6788555b0fb)
|
|
the trouble of detecting what the PIC suffix should actually be.
Change PICFLAG in configure.in to PICFLAGS for consistency.
Patches from Joachim Schmitz <schmitz@hp.com> for bug 574.
(This used to be commit ecfbc5f5295c64d1ba553356dd09f65e9b5d1ccb)
|
|
macro get recompiled after configure has ran.
This was done by touching the source file. This patch changes it to removing
the object file, so that you don't need write-access to the source directory.
(This used to be commit 1a95f5c9a9ad10046c481b7d3ad4e15a77e23144)
|
|
Patch by Stefan Metzmacher <metze@metzemix.de>
(This used to be commit 9f6cd8177db9a88f681f28a8dca044595ddaae88)
|
|
were found for $BACKEND
(This used to be commit 76229085dbc76942b9b83604ea820a433fad4b0f)
|
|
this (HPUX 11). Currently it's initialised to 'ar' but this may have
to be changed if any systems pop up that have archivers that aren't
named 'ar'. Closes bug #552.
(This used to be commit 6aada3bd3e08abedc4c043d1ceb667ca73f8cd62)
|
|
overwrite the CFLAGS variable
(This used to be commit dbf7fc4feb7f9c7cb720ce2dcbc8bb16badfe1f2)
|
|
builtin charsets. Defaulting to CP850 when we have just determined that it doesn't work just guarantees that Samba won't work at all (in fact it just seg faults at startup). This fixes Samba on AIX, and I expect on a bunch of other platforms.
(This used to be commit 9635a28181525e5e8cfb8ef77642446a0a4ba280)
|
|
(This used to be commit 5840cbe5f6207471ccd3d518a6aee91d84e24a1f)
|
|
an argument to configure. Closes bug 468.
(This used to be commit 6957ecd25f1d98e045c7a44caf03887e60715b6b)
|
|
Jeremy.
(This used to be commit 8a57f1a72c88cde233b126d468183c52c2598420)
|
|
(rant off :-). Inspired by work from Benjamin Riefenstahl <Benjamin.Riefenstahl@epost.de>.
Also add MacOSX/Darwin configure fixes.
Jerry - can we put this in 3.0 release ? :-).
Jeremy.
(This used to be commit f23acb4ca5feac8ad2acfa1baf7df31283aba3ea)
|
|
(This used to be commit 424b13823b666c122f43d63098cec3e54b4fa353)
|
|
to build on systems with fixed getgrouplist() in GNU libc < 2.3.2.
Unfortunately, we can't detect correctness of getgrouplist() functioning in
portable way so this is left up to developer/packager.
This patch adds --with-good-getgrouplist[=no] switch to configure which packagers
on Linux platforms could use to specify in their own builds if they now that glibc
on their platform is fixed w.r.t CAN-2003-0689. By default we still think that glibc
is vulnerable and perform our version check.
** This patch does not change default behaviour in Samba 3.0 -- by default we are not
vulnerable on glibc as we are not using getgrouplist()
See http://www.securityfocus.com/bid/8477 for vulnerability description.
Right now there are following Linux vendors released glibc updates for CAN-2003-0689:
RedHat -- https://rhn.redhat.com/errata/RHSA-2003-249.html
ALTLinux -- http://www.altlinux.com/index.php?module=sisyphus&package=glibc
(This used to be commit e53622c114e0368515c50b357567fcdd0b95979e)
|
|
(This used to be commit 7f2533207ee46fa968cf1fd31ac0cd89e1fb0bb1)
|
|
library variable names.
(This used to be commit 9b0b0256a8bb93482fad4032902a4ab6d1e99e23)
|
|
This implements some kind of improved AFS support for Samba on Linux with
OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have
OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile
into secrets.tdb with 'net afskey'. If this is done, on each tree connect
smbd creates a Kerberos V4 ticket suitable for use by the AFS client and
gives it to the kernel via the AFS syscall. This is meant to be very
light-weight, so I did not link in a whole lot of libraries to be more
platform-independent using the ka_SetToken function call.
Volker
(This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
|
|
find libpam or security/pam_appl.h
Also change the warnings when we can't do --with-pam_smbpass when
is was requested to errors.
(This used to be commit fe3fb58623c27472d54722b780af43c3e272abaf)
|
|
found.
(This used to be commit dc43c2dd1b4cd02e996fe10f1684a6571b2fd3de)
|
|
to a very recent snapshot) has arcfour-hmac code that doesn't work with
windows. Love suggested detecting it via the existence of KEYTYPE_ARCFOUR_56
which only exists in working versions.
(This used to be commit e039a61e51c50a1999ed8e375c4d5df8b622e310)
|
|
work properly. MIT does not support them, so this check will be used to
decide whether to use them. First part of fixing bug #372.
(This used to be commit 85737fc9371d8208f3dd55d408958e357c48266e)
|
|
nsswitch/pam_winbind.h so we can compile properly on this platform.
(This used to be commit 75411005fcab7ecf31940c5f7b87fd407166f98a)
|
|
Now all 8-bit charsets with gaps (not all symbols defined) could be produced through
one macro -- SMB_GENERATE_CHARSET_MODULE_8_BIT_GAP(CHARSETNAME) within source file
with three charset tables. Full source code for such modules can be generated by
source/script/gen-8bit-gap.sh script which was taken from GNU libc and changed slightly
to follow our data types and structure.
(This used to be commit 37042c7bc0f349370e93e4bed37d8fa371013247)
|