Age | Commit message (Collapse) | Author | Files | Lines |
|
from .NET RC2)
(This used to be commit e074cab810f9299d0b27881cddf8a74f10fe233e)
|
|
-------------------------------------------------------------------------
I think there are basically two problem:
1. Windows clients do not always send ACEs for SMB_ACL_USER_OBJ, SMB_ACL_GROUP_OBJ,
and SMB_ACL_OTHER.
The function ensure_canon_entry_valid() is prepared for that, but tries
to "guess" values from group or other permissions, respectively, otherwise
falling back to minimum r-- for the owner. Even if the owner had full
permissions before setting ACL. This is the problem with W2k clients.
2. Function set_nt_acl() always chowns *before* attempting to set POSIX ACLs.
This is ok in a take-ownership situation, but must fail if the file is
to be given away. This is the problem with XP clients, trying to transfer
ownership of the original file to the temp file.
The problem with NT4 clients (no ACEs are transferred to the temp file, thus
are lost after moving the temp file to the original name) is a client problem.
It simply doesn't attempt to.
I have played around with that using posic_acls.c from 3.0 merged into 2.2.
As a result I can now present two patches, one for each branch. They
basically modify:
1. Interpret missing SMB_ACL_USER_OBJ, SMB_ACL_GROUP_OBJ, or SMB_ACL_OTHER
as "preserve current value" instead of attempting to build one ourself.
The original code is still in, but only as fallback in case current values
can't be retrieved.
2. Rearrange set_nt_acl() such that chown is only done before setting
ACLs if there is either no change of owning user, or change of owning
user is towards the current user. Otherwise chown is done after setting
ACLs.
It now seems to produce reasonable results. (Well, as far as it can. If
NT4 doesn't even try to transfer ACEs, only deliberate use of named default
ACEs and/or "force group" or the crystal ball can help :)
-------------------------------------------------------------------------
Jeremy.
(This used to be commit 1d3b8c528bebfa1971d1affe454a03453335786e)
|
|
Jeremy.
(This used to be commit 54e5413a9267b7279cbde0ec129478a5a9c3116c)
|
|
* distinguish WinXP from Win2k
* add a 1/3 of a second delay in OpenPrinter
in order to trigger a LAN/WAN optimization in
2k clients.
(This used to be commit c7712fa054d21b4884a78b7ea6c0fb8b3d637c6b)
|
|
(This used to be commit 38fa2898967f607a17fd7fbd324f2940a05fb551)
|
|
init_valid_table: Fix a memory leak that would lose the
dynamically-created valid table every time the configuration was
reloaded.
(This used to be commit 3ff4845bc43736bfa091419c80b9a0ebdc9d156e)
|
|
strdup() instead.
Jeremy.
(This used to be commit 6521601bf8013c8809db13ccf7dd256ea4ad5dd7)
|
|
(This used to be commit 3761f8ebe339fbbeffee9d7b69f9483ebfd9ae6b)
|
|
Andrew Bartlett
(This used to be commit 9ef0d40c3f8aef52ab321dc065264c42065bc876)
|
|
- new kerberos code, allowing the account to change it's own password
without special SD settings required
- NTLMSSP client code, now seperated from cliconnect.c
- NTLMv2 client code
- SMB signing fixes
Andrew Bartlett
(This used to be commit 837680ca517982f2e5944730581a83012d4181ae)
|
|
- user_ok() and user_in_group() now take a list of groups, instead of
looking for the user in the members of all groups.
- The 'server_info' returned from the authentication is now kept around
- in future we won't copy the sesion key, username etc, we will just
referece them directly.
- rhosts upgraded to use the SAM if possible, otherwise fake up based on
getpwnam().
- auth_util code to deal with groups upgraded to deal with non-winbind domain
members again.
Andrew Bartlett
(This used to be commit 74b5436c75114170ce7c780c19226103d0df9060)
|
|
(This used to be commit 822f6c2f38b9b30dca2358e99ad6a379f5890c89)
|
|
(This used to be commit 6cb124247d10de86bdf6a98f3dd703b3a9eb1d35)
|
|
(This used to be commit bae354a20c07458722b5193911e7eaaf9bfbaeb7)
|
|
- setenv() replacement
- mimir's ASN1/SPNEGO typo fixes
- (size_t)-1 fixes for push_* returns
- function argument signed/unsigned correction
- ASN1 error handling (ensure we don't use initiailsed data)
- extra net ads join error checking
- allow 'set security discriptor' to fail
- escape ldap strings in libads.
- getgrouplist() correctness fixes (include primary gid)
Andrew Bartlett
(This used to be commit e9d6e2ea9a3dc01d3849b925c50702cda6ddf225)
|
|
(This used to be commit d510ff85fb0dafddf3dea9412a09eeee6e70f0cb)
|
|
to set this for Tru64.
Jeremy.
(This used to be commit a21154961135def29d7ede302ed09ce52fc22fc1)
|
|
(This used to be commit fcc7a197b1ec85f9492e335a824317a904b0c919)
|
|
(This used to be commit d9c485b01017594d113502f9de2248d6c120cfa3)
|
|
(This used to be commit 23ca54000514d400c81950edb556ef4308a88253)
|
|
Jeremy.
(This used to be commit 81437e2ad034e9b83ae954c17a7a261504c55101)
|
|
(This used to be commit e3468d8edc77c4d3dffc81770f4bc991e5a5fe52)
|
|
http://bugs.debian.org/178219 where the first 4096 bytes where being chewed
into the FILE buffer, and never available to X_FILE's read.
Andrew Bartlett
(This used to be commit 8af72c13841ee51bca4f061a91c05e8fd366f586)
|
|
Jeremy.
(This used to be commit d4d8d27bf136bdbc785c7aad027537aabaa56a76)
|
|
(This used to be commit fd3216dbcbaec7d64dd24fe2af6c4156935c47e9)
|
|
(This used to be commit e9f56a157bd472914eebf64fde586104d8274717)
|
|
used to be commit ed336acc6eef4736bd924e8402cc463944e9327c)
|
|
blame for the realloc() stuff.
Plus a couple of minor updates to libads.
Andrew Bartlett
(This used to be commit 34b2e558a4b3cfd753339bb228a9799e27ed8170)
|
|
Andrew Bartlett
(This used to be commit 0676b4e35f2ab5b58c44df9fe2eef112425d6013)
|
|
messages. Stops build-up of large numbers of smbd's waiting to terminate
on large print throughput.
Jeremy.
(This used to be commit 07efebb98473cb3d4adc6b2e0afef3f06dcc99b8)
|
|
messages. Stops build-up of large numbers of smbd's waiting to terminate
on large print throughput.
Jeremy.
(This used to be commit 4ae130bfa82be60de6a6f357f65207fcb24f45fb)
|
|
(This used to be commit abb112ba2ad362036c7b3f340d5f64d6fcc0cd3c)
|
|
Removed duplicate message_register() for REQ_DEBUGLEVEL message.
(This used to be commit 6fee7196d695ca813a301b1e6d7da687b7e7bda5)
|
|
Jeremy.
(This used to be commit 60be9a2f1e6d18562218a55e1a1f753e34fb1e5b)
|
|
to rpcstr_pull() - merge from HEAD (tpot).
Jeremy.
(This used to be commit e781388c59d694058576529fb43f861c48011091)
|
|
(This used to be commit 55d268fdd67e42244128dae8614d0e4aa2eb2da2)
|
|
to rpcstr_pull()
(This used to be commit b9c4cc119588d6a564f0aaf12fd2ef867a42aeb8)
|
|
Perhaps we should try to open O_RDONLY if O_RDWR fails?
(This used to be commit 1e7236371d2b766b161acbb0c950cd3bb4a6ede7)
|
|
- NTLMSSP over SPENGO (sesssion-setup-and-x) cleanup and code refactor.
- also consequential changes to the NTLMSSP and SPNEGO parsing functions
- and the client code that uses the same functions
- Add ntlm_auth, a NTLMSSP authentication interface for use by applications
like Squid and Apache.
- also consquential changes to use common code for base64 encode/decode.
- Winbind changes to support ntlm_auth (I don't want this program to need
to read smb.conf, instead getting all it's details over the pipe).
- nmbd changes for fstrcat() instead of fstrcpy().
Andrew Bartlett
(This used to be commit fbb46da79cf322570a7e3318100c304bbf33409e)
|
|
used to be commit b741abd496621586040081c04674ae53cb5db47c)
|
|
(This used to be commit 305f167db2a34cdf3dd6378954e815ce34111232)
|
|
fix after I talk to tpot
(This used to be commit 607bc0b4fca38640c6b5c730aa4119e2aa9006fc)
|
|
Jeremy.
(This used to be commit af6e4ea640828438fe234db1652dc4c1e10a487e)
|
|
Jeremy.
(This used to be commit efd52f6ca7784a3edfc0371b5ff2054ad9704ab7)
|
|
(This used to be commit 15be89e72fee97106db1bd06d18060c21bbf78e1)
|
|
- smbd/process.c: check log file sizes more often than in
timeout_processing()
- lib/debug.c: increment debug_count inside Debug1() instead of
when log file sizes are checked.
(This used to be commit 303710c2065850beebef678e657633497e4d8452)
|
|
(This used to be commit d1107efa1cd23cbfe8da6d3462714a6f3ec570ae)
|
|
(This used to be commit f150af98a77ebcfa848735b7a67bbb95bd6d5b57)
|
|
memory. This allows the information to be shared amongst all smbd
processes.
HP CR #1099
(This used to be commit 88d977ecceaec45ab6b238ddd32d92885da19793)
|
|
pass NULL if it doesn't care about the gencache key.
(This used to be commit 9ff4fe7e0d95c0cea94f65c00fea21600308d7d1)
|