Age | Commit message (Collapse) | Author | Files | Lines |
|
This changes our behaviour when the setresuid call is available. We now not
only change the effective uid but also the real uid when becoming
unprivileged. This is mainly for improved AFS compatibility, as AFS selects
the token to send to the server based on the real uid of the process.
I tested this with a W2k server with two non-root 'runas' sessions. They come
in via a single smbd as two different users using two session setups. Samba on
Linux can still switch between the two uids, proved by two different files
created via those sessions.
Volker
(This used to be commit 556c62f93535c606122b22e7e843d9da9a1cd438)
|
|
to tty instead of stdout.
(This used to be commit 3cec478b82359c527065c3a8d44daae96b7ac57e)
|
|
in iconv.c and nsswitch/). Using them means you're not thinking about multibyte at
all and I really want to discourage that.
Jeremy.
(This used to be commit d7e35dfb9283d560d0ed2ab231f36ed92767dace)
|
|
when reverse connecting back to a client for printer notify.
Jeremy.
(This used to be commit 06aa434c3fdb139e3f3143d19413556945cbcd4f)
|
|
(This used to be commit e34d21af3882a034810737039dbaae4d45e2645c)
|
|
(This used to be commit bda64a11f7c11ca303122299c3e41c49e6afd933)
|
|
Patch by Stefan Metzmacher <metze@metzemix.de>
(This used to be commit 9f6cd8177db9a88f681f28a8dca044595ddaae88)
|
|
(no need to include all of smbd files to use some basic sec functions)
also minor compile fixes
couldn't compile to test these due to some kerberos problems wirh 3.0,
but on HEAD they're working well, so I suppose it's ok to commit
(This used to be commit c78f2d0bd15ecd2ba643bb141cc35a3405787aa1)
|
|
used to be commit 096b997588880991af8e07034cc4f041daa87b97)
|
|
(no need to include all of smbd files to use some basic sec functions)
also minor compile fixes
(This used to be commit 66074d3b097d8cf2a231bf08c7f4db62da68189d)
|
|
Jeremy.
(This used to be commit 202d4e46527993d359df7cd04fb611c22cc920c3)
|
|
Jeremy.
(This used to be commit 6c38a79be796935ab24764302805deea878b360d)
|
|
Jeremy.
(This used to be commit 7d79a55d9af517ed63f8a4641bbc34564a4ef889)
|
|
Jeremy.
(This used to be commit 8a284463458cfaaff9986bbc459dfc113f921c6c)
|
|
(This used to be commit b6433f5db77a1d62309946c6f23c18c6c299d0c5)
|
|
unconditionally; bug 550
(This used to be commit 9df3f53e6ae751d522c7ac21deb785f1fa05f225)
|
|
>iconv isn't const safe. Neither should smb_iconv be.
>Jeremy.
(This used to be commit 7bd450f8b678e835ba4f9cfdc3d096b04da6f8f7)
|
|
>Fix for #480. Change the interface for init_unistr2 to not take a length
>but a flags field. We were assuming that 2*strlen(mb_string) == length of ucs2-le string.
>This is not the case. Count it after conversion.
>Jeremy.
(This used to be commit e2ab9e54cd0ec0002175cf18ff364f4aebaf85a0)
|
|
Jeremy.
(This used to be commit 238bb74c16417140d85a304890b97e04df389ae9)
|
|
but a flags field. We were assuming that 2*strlen(mb_string) == length of ucs2-le string.
This is not the case. Count it after conversion.
Jeremy.
(This used to be commit f82c273a42f930c7152cfab84394781744815e0e)
|
|
* set version string to "CVS 3.1.0alpha1"
(This used to be commit c6a61ffcbd0c95afd94bd33fd832b24bc8209de5)
|
|
afs share -- this is an AFS share, do AFS magic things
afs username map -- We need a way to specify the cell and possibly
weird username codings for several windows domains
in the afs cell
Volker
(This used to be commit 4a3f7a9356cd5068d9ed4fd6e2336d9bf7923fbd)
|
|
to be changed if we decide to set our real uid. Jeremy?
Volker
(This used to be commit 1fed55aa781bcf9efdd42f361c972b69152137a4)
|
|
(This used to be commit 585764305aa84a7732f71f2e01227e1a6a08664f)
|
|
(This used to be commit e1fac713e25692a5790c3261ba323732930f5249)
|
|
me to expose a type arguement to make_sec_desc(). We weren't copying
the SE_DESC_DACL_AUTO_INHERITED flag which could cause errors on
auto inherited checks.
Jeremy.
(This used to be commit 546b2271c08735ac1049a453abac996d794aa364)
|
|
me to expose a type arguement to make_sec_desc(). We weren't copying
the SE_DESC_DACL_AUTO_INHERITED flag which could cause errors on
auto inherited checks.
Jeremy.
(This used to be commit 28b315a7501f42928d73efaa75f74146ba95cf2d)
|
|
Jeremy.
(This used to be commit b3b2b3d5e7c9d4995890bf7b156fc1176b042cfc)
|
|
Jeremy.
(This used to be commit 0aee73d45733a8eca437954e0c9fd54884bbe770)
|
|
(This used to be commit f4eb7acc7dfc400cc6524dccdd8081acd707f937)
|
|
problems where ASCII was not detected and 646.so were requested through dynamic loading
(This used to be commit c248cd4784ac0f8f16813de36d293ab6bf1d259b)
|
|
so I'm putting it back in.
(This used to be commit ec49fc8ab73b26f86da155475df90843650f0e63)
|
|
>Still on my mb rampage. Ensure smbldap_make_mod() correctly detects old
>values.
>Jeremy.
(This used to be commit 9df18a6c4ea30545297f9e5a0b10b440e6a0687e)
|
|
(This used to be commit 299eb0abd36072af51cbcb761fa9fb6a77584585)
|
|
>Fix for MacOS/X which uses STUPID BROKEN UNICODE COMPOSE CHARACTERS !
>(rant off :-). Inspired by work from Benjamin Riefenstahl <Benjamin.Riefenstahl@epost.de>.
>Also add MacOSX/Darwin configure fixes.
>Jerry - can we put this in 3.0 release ? :-).
>Jeremy.
(This used to be commit 67acde75d3569b612f87646ff0740f8020e8fdcf)
|
|
>For some reason testparm runs at debug level 2 which causes the module probe functions to
>display verbose debugs. Increase the probe debugs to level 3.
(This used to be commit be91bbd570bd94f67001aab9cfb2baf44b390097)
|
|
functions to
display verbose debugs. Increase the probe debugs to level 3.
(This used to be commit d71a7470d721be05ecde44010cf278e8de08d9d3)
|
|
(rant off :-). Inspired by work from Benjamin Riefenstahl <Benjamin.Riefenstahl@epost.de>.
Also add MacOSX/Darwin configure fixes.
Jerry - can we put this in 3.0 release ? :-).
Jeremy.
(This used to be commit f23acb4ca5feac8ad2acfa1baf7df31283aba3ea)
|
|
condition meant fast-path in strchr_m was not being used. Doh !
Jeremy.
(This used to be commit f23c9d36b0cd4083722012e4a94df8295f29d04c)
|
|
values.
Jeremy.
(This used to be commit 41e4479aa9f186d68300086984d6f4c8f9fd2a27)
|
|
to/from utf8 for some calls. The libads code gets this right. Wonder why
the passdb code doesn't use it ?
Jeremy.
(This used to be commit 910d21d3164c2c64773031fddaad35ea88e72a04)
|
|
<ungermann@elzet80.de>
Jeremy.
(This used to be commit c5ed59b37be1bf779e0d0e61c31227b520430afd)
|
|
(This used to be commit a5656a5756b3c1061d683d664a7f087182b39b47)
|
|
not number of bytes. Reproduce this by trying to rename the file named :
sibréseau -> sibréseaU
from Windows 2000 explorer.
Jeremy.
(This used to be commit 035f59599514491609078ac0fe5804278c43a9b3)
|
|
(This used to be commit c17a7dc9a190156a069da3e861c18fd3f81224ad)
|
|
Jeremy.
(This used to be commit 514d9361c7be8cb8ef1a1309773baab1d982eea6)
|
|
Jeremy.
(This used to be commit 6fc0e529f70253244628017a372257e8dc053294)
|
|
(This used to be commit 15d53fd53c622de316d0ff41f1b60f0e2c69f908)
|
|
(This used to be commit 3aab7a3bc7920b6e479700c176ac7a7b80262f42)
|
|
This implements some kind of improved AFS support for Samba on Linux with
OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have
OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile
into secrets.tdb with 'net afskey'. If this is done, on each tree connect
smbd creates a Kerberos V4 ticket suitable for use by the AFS client and
gives it to the kernel via the AFS syscall. This is meant to be very
light-weight, so I did not link in a whole lot of libraries to be more
platform-independent using the ka_SetToken function call.
Volker
(This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
|