summaryrefslogtreecommitdiff
path: root/source3/param
AgeCommit message (Collapse)AuthorFilesLines
2012-05-15s3-auth: remove "security=server" (depricated since 3.6)Stefan Metzmacher1-4/+0
"security=server" has a lot of problems in the world with modern security (ntlmv2 and krb5). It was also not very reliable, as it needed a stable connection to the password server for the lifetime of the whole client connection! Please use "security=domain" or "security=ads" is you authentication against remote servers (domain controllers). metze -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SERVER | | security=server | | | | | | 12 May | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-05-11s3-loadparm: Add synonym "private directory".Karolin Seeger1-0/+9
Karolin Autobuild-User: Karolin Seeger <kseeger@samba.org> Autobuild-Date: Fri May 11 13:04:03 CEST 2012 on sn-devel-104
2012-04-17s3: Return CTDB_PATH from lp_ctdbd_socket()Volker Lendecke1-1/+17
All callers had that fallback
2012-04-16s3: switch off kernel oplocks by defaultChristian Ambach1-1/+1
as discussed on samba-technical, turn kernel oplocks off by default to not leave users without the benefits of Level II oplocks
2012-04-16param: leave realm as a normal string, handle upper/lower case in handle_realmAndrew Bartlett1-1/+1
This matches the behaviour of lib/param. Andrew Bartlett
2012-04-16param: harmonise wins parametersAndrew Bartlett1-3/+3
2012-04-16s3-param: make FN_GLOBAL macros consistent, add lp_ using the macroAndrew Bartlett1-250/+250
This will make it easier to share the parameter tables between this and lib/param. Andrew Bartlett
2012-04-16param: Change from _lp to lp__ as the prefix for internal parameter wrappersAndrew Bartlett1-6/+6
This will make a merge with the lib/param param code easier, as we can then paste lp_ to the front of all parameters unconditionally. Andrew Bartlett
2012-04-16make _lp_readraw() and _lp_writeraw() staticAndrew Bartlett1-2/+2
2012-04-16param: harmonsise logfile parameterAndrew Bartlett1-6/+6
2012-04-11s3:param convert kernel oplocks to share parameterChristian Ambach1-7/+4
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-04-05build: Remove SMB_STRUCT_DIR defineAndrew Bartlett1-2/+2
2012-04-05build: Remove SMB_STRUCT_DIRENT defineAndrew Bartlett1-1/+1
2012-04-05build: Remove sys_closedir wrapperAndrew Bartlett1-3/+3
2012-04-05build: Remove sys_readdir wrapperAndrew Bartlett1-1/+1
2012-04-05build: Remove sys_opendir wrapperAndrew Bartlett1-2/+2
2012-04-05build: Remove sys_open wrapperAndrew Bartlett1-2/+2
2012-03-07Change default protocol to SMB2_02.Jeremy Allison1-1/+1
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Mar 7 22:41:21 CET 2012 on sn-devel-104
2012-03-04s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett1-15/+2
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-02-27s3-param: Align lp_{max,min}protocol with lib/param namesAndrew Bartlett2-10/+31
This adds an alisas to ensure that both our loadparm systems know all the names. I would like to move to the 'server ..' name as canonical, and this will be raised on the list. Andrew Bartlett
2012-02-16s3-param Remove off-by-default and unused "send spnego principal"Andrew Bartlett1-10/+0
This is not honoured by the common SPNEGO code. This matches mondern windows versions which do not send this value, as it would be insecure for a client to rely on it. (See also the depricated client use spnego principal directive). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-02-10s3-param: Remove unused share_defined()Andrew Bartlett1-5/+0
Found by callcatcher: http://www.skynet.ie/~caolan/Packages/callcatcher.html Andrew Bartlett
2012-01-31s3-libsmb: Use gensec_spnego in smb seal clientAndrew Bartlett1-0/+1
This is intead of the inline, manual spnego code currently in use. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-17s3: Fix bug 8695Volker Lendecke1-0/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 17 18:55:01 CET 2012 on sn-devel-104
2012-01-06s3: Avoid a potential alignment requirement issueVolker Lendecke1-3/+2
2011-12-22s3-loadparm: mark a few parameters as having P_BYTES typeAndrew Tridgell1-12/+12
this fixes a problem with "max xmit = 32K" resulting in a maximum SMB transmit size of 32 bytes, which makes for some very interesting network traces! This is what was causing smbtorture to consume gigabytes of memory in the rpc.schannel test
2011-12-17s4 dns: Allow updates based on smb.conf settingKai Blin1-0/+1
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sat Dec 17 04:19:40 CET 2011 on sn-devel-104
2011-12-13s3:param: don't reference conn_snum_used directly in load_usershare_shares()Stefan Metzmacher1-2/+3
This uses the same logic as lp_killunused(). metze
2011-11-17s3-param: loadparm has no dependency to smbldap.Günther Deschner1-1/+0
Guenther
2011-11-17param: Connect lp_security to the lib/param code to allow testsAndrew Bartlett1-0/+1
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: Move enum values into a common (included) .c fileAndrew Bartlett1-83/+1
This #include hack is required as it is not possible to declare a compile-time sized array in a header file. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: move server role helpers into loadparm.hAndrew Bartlett1-1/+0
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: calculate server role from security, and security from server roleAndrew Bartlett3-110/+9
This allows smb.conf files from either the samba3 or samba4 tradition to come to the same value of server role, using the information in the smb.conf file. This is important so that tools like 'net getlocalsid' work against a Samba4 AD installation (yes, users have tried this). Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s3-param remove lp_domain_logons(), always use IS_DCAndrew Bartlett2-2/+1
This makes the code internally consistant. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17param: make server role list common and include auto (for the new default)Andrew Bartlett1-3/+8
Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17s3-param: Add "server role" as global parameterAmitay Isaacs2-10/+30
This will help extracting server role processing code in common library.
2011-11-17param: Add "domain logons" and "domain master" parametersAmitay Isaacs1-0/+2
This makes parsing of config files with s3 loadparm code and s4 loadparm code consistent.
2011-11-03s3:param: change default of "* signing" to "default"Stefan Metzmacher1-2/+2
This should not change the bahavior. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Nov 3 18:33:34 CET 2011 on sn-devel-104
2011-11-03s3:param: make use of SMB_SIGNING_* constantsStefan Metzmacher1-18/+20
metze
2011-11-03s3:param: the behavior of "client/server signing = auto" is the same as "true"Stefan Metzmacher1-2/+2
So remove the special case for 'Auto'. metze
2011-10-25libcli/smb: move smb_signing.[ch] to the toplevelStefan Metzmacher1-1/+1
metze
2011-10-21Deprecate "acl check permissions".Jeremy Allison1-1/+1
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 21 21:51:18 CEST 2011 on sn-devel-104
2011-10-13lib/param Add 'use mmap' parameter to control tdb use of mmapAndrew Bartlett1-0/+3
2011-10-11s3:dbwrap: convert dbwrap_fetch(), dbwrap_fetch_bystring() and ↵Michael Adam1-5/+16
dbwrap_fetch_bystring_upper() to NTSTATUS
2011-10-11s3:dbwrap: move the db_open_rbt() prototype to a new header dbwrap_rbt.hMichael Adam1-0/+1
2011-10-11lib/param move source4 param code to the top levelAndrew Bartlett1-1/+1
This is done so that the lpcfg_ functions are available across the whole build, either with the struct loadparm_context loaded from an smb.conf directly or as a wrapper around the source3 param code. This is not the final, merged loadparm, but simply one step to make it easier to solve other problems while we make our slow progress on this difficult problem. Andrew Bartlett
2011-10-08s3:param: add lp_host_msdfs to loadparm_s3_contextStefan Metzmacher1-1/+3
metze
2011-10-07s3-param Remove odd formatting to allow code mergeAndrew Bartlett1-18/+18
This code is very old, and has some code styles that we have not used in Samba for a very long time. This fixes up a the extra braces around return values. Andrew Bartlett
2011-10-07s3-param: inline octal_string into caller to allow code mergeAndrew Bartlett1-3/+6
2011-10-07s3-param use Auto define for lm_announce defaultAndrew Bartlett1-1/+1