summaryrefslogtreecommitdiff
path: root/source3/param
AgeCommit message (Collapse)AuthorFilesLines
2011-06-01s3-param Make lp_smb_passwd_file() and lp_private_dir() constAndrew Bartlett1-2/+2
This disables % substitutions in the 'smb passwd file' and 'private dir' parameters. These are used all over the codebase, and need to be internally consistent for the life of the process, as they determine the location of secrets.tdb, as well as the passdb databases. Andrew Bartlett
2011-06-01s3-param Make lp_smb_ports() constAndrew Bartlett1-1/+1
It makes no sense to have a % substiution in the 'smb ports' parameter. Andrew Bartlett
2011-06-01s3-param Make charset parameters constAndrew Bartlett1-3/+3
This removes the dangerous ability for these parameters to change based on % substitutions. Andrew Bartlett
2011-06-01s3-param Make lp_passwordserver() const.Andrew Bartlett1-1/+1
This means that it no longer takes % substituations, and so the documentation for this behaviour is removed from the smb.conf manpage. (This mode is only useful in security=server, which is already marked as deprecated in 3.6). Andrew Bartlett
2011-05-31s3-param Move init_iconv() to loadparm.cAndrew Bartlett1-0/+14
This assists with some dependency loops Andrew Bartlett
2011-05-31s3-param split service.c into param and smbd componentsAndrew Bartlett2-21/+276
The dependency chain of find_service can't be satisfied sensibly outside smbd, so don't include this in the main 'param' subsystem. Also remove the duplicate find_service() and conn_snum_used() from dummysmbd.c: The WAF build does not need these dummies any more, but file. Andrew Bartlett
2011-05-31s3-smbd provide struct smbd_server_connection * to conn_snum_usedAndrew Bartlett1-5/+6
This provides the 'sconn' parameter to this key functions, that is currently duplicated in dummysmbd.c, which causes duplicate symbol issues in the waf build. This has natrually caused a number of consequential changes across the codebase, includning not passing a messaging context into initial reload_services(): This causes problems because the global smbd_server_connection isn't yet set up, as there isn't a connection here, just the initial process. Andrew Bartlett
2011-05-25s3-param Depricate 'password server = foo:12389' syntaxAndrew Bartlett1-0/+5
This was originally intended to allow the LDAP port on a DC to be varied, but makes little sense to change one port when in an environment where krb5, ldap, smb and potentially DCE/RPC over TCP are involved. Andrew Bartlett
2011-05-24Fix bug #8150 - Ban 'dos charset = utf8'Jeremy Allison1-1/+39
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue May 24 03:52:50 CEST 2011 on sn-devel-104
2011-05-18s3-param: Remove unused snum2params_staticAndrew Bartlett1-12/+0
2011-05-18s3-param: remove unused share_iterator functionsAndrew Bartlett1-48/+0
2011-05-16s3-printing: Get the location info from cups.Günther Deschner1-1/+2
Signed-off-by: Günther Deschner <gd@samba.org>
2011-05-13s3-param Deprecate a number of security parameters for 3.6Andrew Bartlett1-5/+11
This follows up on the agreement on the samba-technical list in Jan 2011 to deprecate these options, and to possibly remove these in the 4.0 release after user feedback. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri May 13 19:51:41 CEST 2011 on sn-devel-104
2011-05-10libsmbconf: Convert smbconf_get_config() to sbcErr.Andreas Schneider1-3/+3
Signed-off-by: Michael Adam <obnox@samba.org>
2011-05-10libsmbconf: Convert smbconf_get_share() to sbcErr.Andreas Schneider1-3/+3
Signed-off-by: Michael Adam <obnox@samba.org>
2011-05-10libsmbconf: Convert smbconf_init() to sbcErr.Andreas Schneider1-4/+4
Signed-off-by: Michael Adam <obnox@samba.org>
2011-05-06s3: only include tdb headers where needed.Günther Deschner1-0/+1
Guenther
2011-05-05s3-param: run minimal_includes.pl.Günther Deschner1-1/+0
Guenther
2011-04-05s3: Make vlp printing work by defaultVolker Lendecke1-8/+55
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Apr 5 13:12:14 CEST 2011 on sn-devel-104
2011-03-30s3-includes: only include system/filesys.h when needed.Günther Deschner1-0/+1
Guenther
2011-03-28Revert "Change strict allocate to default to true.Stefan Metzmacher1-1/+1
This reverts commit ecf48af135e4c1ebc5aafe4b3dad785162f5949a. This makes Samba unusable on systems without Linux and a modern Filesystem. This was discussed with Jeremy on IRC: http://irclog.samba.org/2011/01/20110126-Wed.log metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Mar 28 09:00:09 CEST 2011 on sn-devel-104
2011-03-23fault: get fault.c ready for use by s4Andrew Tridgell1-0/+2
this moves the s3 specific dumpcore code into source3/lib/dumpcore.c, and uses a function pointer to setup which smb_panic call to use
2011-03-22s3:loadparm: set the default "idmap config * : backend" in initialize_globals().Michael Adam1-0/+2
2011-03-22s3:loadparm: deprecate "idmap uid/gid/backend" and have them set "idmap ↵Michael Adam1-26/+14
config * : range/backend"
2011-03-22s3:loadparm: remove unused parameter "idmap read only".Michael Adam1-10/+0
This has not been released yet and is now useless since we use the "idmap config * : read only = ..." syntax.
2011-03-18s3: Add "print notify backchannel" parameter to prevent us doing the reverse ↵Volker Lendecke1-0/+12
print notify connection. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Mar 18 21:34:30 CET 2011 on sn-devel-104
2011-03-15s3-build: try to silence annoying "Ignoring invalid value 'vlp' for ↵Günther Deschner1-2/+3
parameter 'printing'" warning on the buildfarm. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Mar 15 23:38:43 CET 2011 on sn-devel-104
2011-03-01lib/util: new merged debug systemAndrew Bartlett1-1/+0
This is the s3 debug system, with a number of changes to tidy it up for common use. The debug class system is simplified by the removal of the ISSET table, the system no longer attempts to cope with assignment of DEBUGLEVEL, and the full class table is always available (rather than just DEBUGLEVEL_CLASS[DBCG_ALL]) from startup. It is also no longer confusingly described as a hack, but as the initial table. Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Mar 1 04:32:12 CET 2011 on sn-devel-104
2011-02-25s3-param: Make "rlimit_max below minimum Windows limit" notification less scaryJonathan Nieder1-2/+2
The fix to bug #6837 results in messages from testparm that look like a misconfiguration even though they aren't: rlimit_max: rlimit_max (8192) below minimum Windows limit (16384) Apply a slight change in wording ("increasing rlimit_max to minimum Windows limit") to make it clearer that the user has done nothing wrong. (Similarly for sysctl_max.) Reported-by: Miguel Medalha <miguelmedalha@sapo.pt> Signed-off-by: Jonathan Nieder <jrnieder@gmail.com> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Feb 25 03:56:40 CET 2011 on sn-devel-104
2011-02-15s3: no need to globally include intl.h.Günther Deschner1-1/+1
Guenther
2011-02-09s3:loadparm: skip leading spaces in parameter values from the command lineMichael Adam1-1/+6
2011-01-29s3: Make _lp_maxprotocol staticVolker Lendecke1-1/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sat Jan 29 16:07:28 CET 2011 on sn-devel-104
2011-01-27Change "security=share" to downgrade to SMB1 from SMB2, rather than trying ↵Jeremy Allison1-1/+12
to fake it.
2011-01-21s3:winbind: Fork multiple children per domainVolker Lendecke1-0/+24
This makes us scale better with many simultaneous winbind requests, some of which might be slow. This implementation breaks offline logons, as the cached credentials are maintained in a child (this needs fixing). So, if the offline logons are active, only allow one DC connection. Probably the offline logon and the scalable file server cases are separate enough so that this patch is useful even with the restriction.
2011-01-19s3-param: Fixed code block in max_open_files().Andreas Schneider1-1/+1
When the HAVE_GETRLIMIT and RLIMIT_NOFILE macros are defined the block isn't closed. Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Wed Jan 19 23:10:50 CET 2011 on sn-devel-104
2010-12-15Change strict allocate to default to true. (cherry picked from commit ↵Jeremy Allison1-1/+1
820ea22a07b062b1717d35de8fa7051fc1067c3f)
2010-12-10Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to ↵Jeremy Allison1-4/+21
128 credits. Jeremy.
2010-12-10s3-client Use NTLMv2 by default in the Samba clientAndrew Bartlett1-2/+2
This matches the improved security measures of Windows Vista. Andrew Bartlett
2010-12-10s3-smbd Don't send SPNEGO principal (rfc4178 hint) by defaultAndrew Bartlett1-0/+11
This patch, based on the suggestion by Goldberg, Neil R. <ngoldber@mitre.org> turns off the sending of the principal in the negprot by default, matching Windows 2008 behaviour. This slowly works us back from this hack, which from an RFC perspective was never the right thing to do in the first place, but we traditionally follow windows behaviour. It also discourages client implmentations from relying on it, as if they do they are more open to man-in-the-middle attacks. Andrew Bartlett
2010-12-10s3-libads Default to NOT using the server-supplied principal from SPNEGOAndrew Bartlett1-0/+11
This principal is not supplied by later versions of windows, and using it opens up some oportunities for man in the middle attacks. (Becuase it isn't the name being contacted that is verified with the KDC). This adds the option 'client use spnego principal' to the smb.conf (as used in Samba4) to control this behaivour. As in Samba4, this defaults to false. Against 2008 servers, this will not change behaviour. Against earlier servers, it may cause a downgrade to NTLMSSP more often, in environments where server names are not registered with the KDC as servicePrincipalName values. Andrew Bartlett
2010-11-27s3-param Fix lp_set_cmdline() to set the flag on alias values tooAndrew Bartlett1-1/+11
Otherwise, -d10 would be overridden by 'debug level = 1', because debug level is an alias of 'log level' which -d was setting. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sat Nov 27 01:02:40 CET 2010 on sn-devel-104
2010-11-10Fix bug 7781 - Samba transforms ShareName to lowercase (sharename) when ↵Jeremy Allison1-9/+3
adding new share via MMC Change the find_service() interface to not depend on fstring, and create a useable talloc-based interface. Jeremy.
2010-11-05s3: Allow disabling of mdns registrationsVolker Lendecke1-0/+12
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Nov 5 11:24:41 UTC 2010 on sn-devel-104
2010-11-02s3-param Fix up lp_set_cmdline() not to re-store cmdline options on each reloadAndrew Bartlett1-4/+9
The previous code was buggy in that it did not honour the 'store' argument to lp_set_cmdline_helper(), and would use the stored parameter after freeing it when handling overwritten values. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 2 05:19:17 UTC 2010 on sn-devel-104
2010-11-02s3-debug Remove 'AllowDebugChange' and use lp_set_cmdline() insteadAndrew Bartlett1-6/+1
By removing this global variable, the API between the two different debug systems is made more similar. Both s3 and s4 now have lp_set_cmdline() which ensures that the smb.conf cannot overwrite these the user-specified log level. Andrew Bartlett
2010-11-02s3-debug Impove setup_logging() to specify logging to stderrAndrew Bartlett1-2/+1
This change improves the setup_logging() API so that callers which wish to set up logging to stderr can simply ask for it, rather than directly modify the dbf global variable. Andrew Bartlett
2010-10-22Revert "Wrap security_token_has_privilege() with a check for ↵Jeremy Allison1-8/+0
lp_enable_privileges(). Needed" Not needed - privileges code prevents "enable privileges = no" from adding privileges anyway. This reverts commit a8b95686a7bde3f96f141b6938e24e101567ef54. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 22 23:41:36 UTC 2010 on sn-devel-104
2010-10-22Wrap security_token_has_privilege() with a check for lp_enable_privileges(). ↵Jeremy Allison1-0/+8
Needed to maintain compatibility with smb.conf manpage. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 22 18:15:48 UTC 2010 on sn-devel-104
2010-10-16Don't arbitrarily clean all parametric options in add_a_service(),Jeremy Allison1-3/+3
that is called from many places, not just smb.conf processing. Only clean parametric options when doing actual smb.conf reading (or registry equivalent). Michael Adams, Volker, Metze, please check. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Oct 16 06:46:19 UTC 2010 on sn-devel-104
2010-10-08s3: Remove talloc_autofree_context() from loadparm.cVolker Lendecke1-6/+5
None of these uses requires a special destructor
generated by cgit (git 2.34.1) at 2024-11-23 12:03:57 +0000