summaryrefslogtreecommitdiff
path: root/source3/param/loadparm.c
AgeCommit message (Collapse)AuthorFilesLines
2013-03-10param: Remove incorrectly added defaults in AD DC allowing WORLD WRITABLE filesAndrew Bartlett1-2/+0
These defaults were incorrectly added in fc5caffbc139d63cab1ec105884863f73772586f in what turns out to be an incorrect fix for bug #9462, which was in turn introduced by the swapping of security mask (default 0777) for create mask (0755) in 6adc7dad96b8c7366da042f0d93b28c1ecb092eb. While the permissions on sysvol and netlogon (the default shares) were fixed by provision, any additional shares that did not yet have an explit ACL set would create world-writable files by default. Administrators will need to manually correct the file permissions on any additional shares that were created after installation of the AD DC. Andrew Bartlett Reviewed-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sun Mar 10 12:00:31 CET 2013 on sn-devel-104
2013-02-22s3-param: Don't leak file descriptor.Andreas Schneider1-0/+1
Reviewed-by: Alexander Bokovoy <ab@samba.org>
2013-02-05s3:param: add new lp_idmap_default_backend()Michael Adam1-0/+5
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: introduce new lp_idmap_backend() that takes the domainMichael Adam1-0/+27
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: add a commentMichael Adam1-0/+4
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: remove unused function lp_idmap_backend()Michael Adam1-0/+1
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: remove unused functions lp_idmap_uid() and lp_idmap_gid()Michael Adam1-47/+0
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: add utility function lp_idmap_default_range()Michael Adam1-0/+5
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: add a utility function lp_idmap_range() to get the configured ↵Michael Adam1-0/+40
range for a given domain. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2013-02-05s3:param: remove an old comment (that is not up-to date any more)Michael Adam1-2/+0
Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Christian Ambach <ambi@samba.org>
2012-11-20s3:param: set "map archive = no" in ROLE_ACTIVE_DIRECTORY_DCStefan Metzmacher1-0/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
2012-11-16s3:param: make init_locals() static.Michael Adam1-1/+1
it is only used in loadparm.c Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Fri Nov 16 03:33:34 CET 2012 on sn-devel-104
2012-11-16s3-param: Handle setting default AD DC per-share settings in init_locals()Andrew Bartlett1-19/+37
This function is helpfully called between when we finish processing the globals and when we start processing the individual shares. This means that the "vfs objects" and other per-share settings we specify here become the defaults for (eg) [netlogon] and [sysvol] but the admin can override these on a per-share basis or (as we must in make test) for the whole server. This broke setting and fetching of group policy objects from Windows clients, since this setting was moved from fileserver.conf in 8518dd6406c0132dfd8c44e084c2b39792974f2c, and wasn't found in 'make test' because we have to override the vfs objects to insert the xattr_tdb and fake_acl modules. Andrew Bartlett Reviewed-by: Michael Adam <obnox@samba.org>
2012-11-01s3-param: Move the options needed for running smbd in the AD DC to loadparmAndrew Bartlett1-0/+17
This avoids the whole fileserver.conf thing, and simply handles everything in C. The main challenge is that if s3fs is enabled in a member server configuration (unlikely) then these options will not be set, and it overrides any other attempt to set these as globals. (The previous approach essentially just changed defaults, because the include = of smb.conf was after the values were set in fileserver.conf). Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Thu Nov 1 11:47:22 CET 2012 on sn-devel-104
2012-10-04Remove the parameters:Jeremy Allison1-4/+0
security mask force security mode directory security mask force directory security mode and update the docs.
2012-10-04Revert "Add functions to programatically set the security mask and directory ↵Jeremy Allison1-14/+0
security mask parameters." This reverts commit 8f0ecbbbeebff0174579a78827d384067cd4cbb7. Not now needed as part of the move to remove security mask parameters.
2012-10-02Add functions to programatically set the security mask and directory ↵Jeremy Allison1-0/+14
security mask parameters.
2012-09-18panic action is defined as GLOBAL_VAR(szPanicAction) not ↵Matthieu Patou1-1/+0
GLOBAL_VAR(panic_action) Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Sep 18 06:12:00 CEST 2012 on sn-devel-104
2012-09-08s3: introduce a new share config option "durable handles" defaulting to "yes"Michael Adam1-0/+1
This is in order to be able to turn durable handles off and on on a per share basis. Note: This is only used in combination with: kernel share modes = no kernel oplocks = no posix locking = no Which means CIFS/SMB2 only access. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-08s3: add an option "kernel share modes" to be able to switch off using kernel ↵Michael Adam1-0/+1
flocks Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-08loadparm: remove remnants of removed option "share modes"Michael Adam1-3/+0
(This completes commit d0878b3b8179b1cf061e1058bacbe670363b51c6) Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-08s3:param: change "server max protocol" to "SMB3"Stefan Metzmacher1-1/+1
metze
2012-09-06s3-printing: Restrict printing=cups to systems with cups development headers ↵Andrew Bartlett1-14/+0
at build time This means that instead of failing due to the default commandline values not being quite correct that we clearly fail at loadparm and testparm time when parsing the printing= line. Andrew Bartlett
2012-09-04s3-passdb: Rename pdb_samba4 to samba_dsdb and autoconfigure when we are a AD DCAndrew Bartlett1-0/+1
The name samba_dsdb is not ideal, but it matches the primary ldb module we use, and more importantly it avoids having '4' in the name. We should slowly avoid using the term samba4 in long-term places like the smb.conf because it is confusing to users given we are shipping Samba 4.0 as an AD DC as well as all the other supported roles (domain member/standalone server/classic DC) Additionally, samba4 will be an odd name when we eventually release Samba 5.0! samba4 remains accepted as an alias to ensure existing smb.conf files load, but to allow changes here in the future, we set the value during the smb.conf load, and not during the provision when we are an AD DC. This simplifies the default smb.conf for the vast majority of our users and reduces the number of things listed in smb.conf files that we later have to work around if we wish to change the name/implementation of the passdb glue module again. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Sep 4 04:45:16 CEST 2012 on sn-devel-104
2012-08-28s3-param: Avoid assert on use of talloc_tos() without stackframeAndrew Bartlett1-2/+3
This is hit during samba-tool domain classicupgrade Andrew Bartlett
2012-08-23file_server: Move default VFS module settings to loadparm.cAndrew Bartlett1-0/+13
This means that any utility that calls into the VFS layer will get the right modules. Because we use the fake_acls backend we need to override this whole list in Samba4.pm however. Andrew Bartlett
2012-08-21build: Remove special case for the build farmAndrew Bartlett1-1/+1
Except in the formatting of the selftest output, this removes the special case of the build farm, so that an autobuild, a manual make test and the build farm are more similar. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Aug 21 06:39:04 CEST 2012 on sn-devel-104
2012-08-17s3:smbd: lp_smb_encrypt() returns SMB_SIGNING_* valuesStefan Metzmacher1-1/+1
metze
2012-08-10s3:param: fix compiler warnings with FN_GLOBAL_CONST_STRING()Stefan Metzmacher1-1/+1
metze
2012-08-09Correctly check for errors in strlower_m() returns.Jeremy Allison1-1/+4
2012-08-07s3-param: Remove never-reached condition for popts == NULLAndrew Bartlett1-4/+0
All the callers provide a parametric options pointer to fill in. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Aug 7 17:16:38 CEST 2012 on sn-devel-104
2012-08-07s3-param: Remove never-reached condition for opt_list == NULLAndrew Bartlett1-4/+0
All the callers provide a parametric options pointer to fill in. Andrew Bartlett
2012-08-07source3/loadparm.c: Move string_set/string_free inside.Rusty Russell1-0/+52
The only user, so make them static inside loadparm.c Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-07source3/loadparm: make struct loadparm_service a talloc object.Rusty Russell1-1/+2
This gives us a place to allocate members from. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-07loadparm: Add ctx member to struct loadparm_global.Rusty Russell1-0/+3
Rather than tallocing global parameters off NULL, keep it neat by having a Global.ctx member. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-08-06lib/param: move enum dns_update_settings to lib/paramChristian Ambach1-1/+0
2012-08-06lib/param: Also enable vlp when --enable-selftest is specifiedAndrew Bartlett1-1/+1
2012-07-27lib/param: Rename "socket address" to "nbt client socket address" to clarify ↵Andrew Bartlett1-1/+1
role This parameter is only used in our NBT client code and in nmbd as a fallback when we fail to select a better interface from "interfaces" to use directly. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jul 27 12:16:25 CEST 2012 on sn-devel-104
2012-07-27lib/param: Remove unused "paranoid server security"Andrew Bartlett1-1/+0
This became unused when security=server went away. Andrew Bartlett
2012-07-27param: Make socket_address common, Revert ↵Andrew Bartlett1-16/+0
611ef42053eb99f4c29d4efa86eaea9f1ca06286 This essentially reverts the commit 611ef42053eb99f4c29d4efa86eaea9f1ca06286 Author: Yasuma Takeda <yasuma@osstech.co.jp> Date: Fri Dec 5 13:37:51 2008 -0800 Fix bug #5944 - nmbd does not boot if socket adress = "" is defined in smb.conf Intead, the documentation is fixed so that the correct default is recorded. Removing the special case handling here allows this to be dealt with in the same way as all other parameters. Andrew Bartlett
2012-07-27lib/param: Merge parameter tables into a common fileAndrew Bartlett1-4124/+0
This file is then included into both loadparm systems. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2012-07-27s3-param: Merge "log file" parameter with lib/paramAndrew Bartlett1-1/+7
The lib/param code uses a special handler for setting the log file. We need to set this here, so that we can make this table common. Andrew Bartlett
2012-07-24lib/param: Merge handling of security/domain master/domain logons/server roleAndrew Bartlett1-5/+8
This ensures that the same input parameters always gives the same output values in both loadparm systems. Andrew Bartlett
2012-07-24lib/param: Make lp_usershare_max_shares() a common parameterAndrew Bartlett1-1/+0
Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2012-07-24lib/param: Move all enum declarations to lib/paramAndrew Bartlett1-136/+1
This is in preperation for the parameter table being made common. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2012-07-24lib/param: Rename param_enums.c to param_table.cAndrew Bartlett1-1/+1
This is in preperation for the parameter table being merged into this file. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Jul 24 09:16:44 CEST 2012 on sn-devel-104
2012-07-24s3-param: Merge parameter varaibles with lib/paramAndrew Bartlett1-10/+11
Baded on an earlier patch: Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2012-07-24s3-param: fix indent on cups encryptAndrew Bartlett1-1/+1
2012-07-24s3-param: Merge a number of s4 parameters from lib/param to make this table ↵Andrew Bartlett1-10/+287
common This is not finished yet, but this is a downpayment on the final task. Based on an work that that was Pair-Programmed-With: Andrew Tridgell <tridge@samba.org> Andrew Bartlett
2012-07-24param: Make internal handler for 'server role' commonAndrew Bartlett1-3/+2