summaryrefslogtreecommitdiff
path: root/source3/rpc_server
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r11573: Adding Andrew Bartlett's patch to make machine accountJeremy Allison1-1/+4
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes the auth module interface to 2 (from 1). The effect of this is that clients can access resources as a machine account if they set these flags. This is the same as Windows (think of a VPN where the vpn client authenticates itself to a VPN server using machine account credentials - the vpn server checks that the machine password was valid by performing a machine account check with the PDC in the same was as it would a user account check. I may add in a restriction (parameter) to allow this behaviour to be turned off (as it was previously). That may be on by default. Andrew Bartlett please review this change carefully. Jeremy. (This used to be commit d1caef866326346fb191f8129d13d98379f18cd8)
2007-10-10r11511: A classic "friday night check-in" :-). This moves muchJeremy Allison1-3/+3
of the Samba4 timezone handling code back into Samba3. Gets rid of "kludge-gmt" and removes the effectiveness of the parameter "time offset" (I can add this back in very easily if needed) - it's no longer being looked at. I'm hoping this will fix the problems people have been having with DST transitions. I'll start comprehensive testing tomorrow, but for now all modifications are done. Splits time get/set functions into srv_XXX and cli_XXX as they need to look at different timezone offsets. Get rid of much of the "efficiency" cruft that was added to Samba back in the day when the C library timezone handling functions were slow. Jeremy. (This used to be commit 414303bc0272f207046b471a0364fa296b67c1f8)
2007-10-10r11451: Fix -O1 "might be using uninitialized" errors.Jeremy Allison1-1/+1
Jeremy. (This used to be commit cab76c3c33883aad444eefb6562ab1b27d9ca88a)
2007-10-10r11433: Fix for bug #3223 - ensure we're root before doingJeremy Allison1-5/+53
any potential lib/smbldap.c calls. Jeremy. (This used to be commit 915cfb48f08b3748e22e68ed028eaca6d558cbad)
2007-10-10r11332: eventlog API uses NTSTATUS, not WERROR for return codesGerald Carter1-34/+33
(This used to be commit f5f40633bc3f641a0fef4934375d0d829899b0d7)
2007-10-10r11292: Missed merge from Samba 2.2 many years ago....Gerald Carter1-5/+0
Don't count open pipes in the num_files_open on a connection. conn_idle_all() handles this by looking for open rpc handles If there are no open handles, we can close the IPC$ share. (This used to be commit 747fba4dbf06c42495c430cd78c1cded3445f821)
2007-10-10r11240: * fix invalid read reported by valgrind in theGerald Carter1-68/+34
spoolss backchannel connection by rewriting spoolss_connect_to_client(). Ensure that we save the cli_state* in the rpc_pipe_client struct. * fix typo in debug message in cli_start_connection" (This used to be commit 18400f96628ffdd332c2fb2aa52b5e9aee5cb3ce)
2007-10-10r11236: Implement user rename for smbpasswd and ldap backends. Some cleanup onJim McDonough1-0/+20
tdb as well to make naming consistent. (This used to be commit ee91eb9a39cc5e3edd9e97eb040e7557930e4e62)
2007-10-10r11235: fix segfault in addprinter due to mixing talloc() and malloc()'d memoryGerald Carter1-3/+1
(This used to be commit f6f78877b485be5efd5cf1f3147b2e9fee647e52)
2007-10-10r11170: root free pass on eventlog open access checkGerald Carter1-0/+7
(This used to be commit 4e3ff41e1ee2e3c323814fd8c6aa44ecab412257)
2007-10-10r11137: Compile with only 2 warnings (I'm still working on that code) on a gcc4Jeremy Allison4-27/+26
x86_64 box. Jeremy. (This used to be commit d720867a788c735e56d53d63265255830ec21208)
2007-10-10r11135: should fix seg fault in addprinter code reported by Marcin. ↵Gerald Carter1-6/+15
Allocate memory in convert_printer_info() if necessary (This used to be commit 7ada5da8e94a08a9a3e488172fa04ce688882299)
2007-10-10r11072: add routines for converting REG_MULTI_SZ to and from char**Gerald Carter1-1/+13
(This used to be commit e858eed813b5a9a8d57262142c5bbde2951b5590)
2007-10-10r11069: make sure to zero memory when allocating a a REGVAL_CTR structGerald Carter1-1/+5
(This used to be commit bfdcbb7572352b3a3b7941249438a927eb91e18d)
2007-10-10r11060: merging new eventlog code from trunkGerald Carter2-507/+469
(This used to be commit 1bcf7e82ede63a851a244162a3b939373787b693)
2007-10-10r11054: patch from Brian Moran; fix error code return in ↵Gerald Carter1-18/+5
_srv_net_name_validate() (This used to be commit b4e78520ccb8c896a52e3f3e7a52e19e3b2c33bf)
2007-10-10r10911: part of #2861: add rename support for usrmgr.exe when using tdbsamJim McDonough1-0/+29
This gets it working before replacing tdb with the samba4 version. (This used to be commit 8210b0503a050e12ee1b4335fa6e50d10ad06577)
2007-10-10r10819: merging a couple of fixes from trunkGerald Carter3-6/+4
* only keep the registry,tdb file open when we have an open key handle * tpot's setup.py fix * removing files that no longer exist in trunk and copying some that were missing in 3.0 (This used to be commit 6c6bf6ca5fd430a7a20bf20ed08050328660e570)
2007-10-10r10795: Fix code before decl error.Jeremy Allison1-1/+2
Jeremy. (This used to be commit 30bd894ee63e5be266b6069533138ccb3c0fbccb)
2007-10-10r10792: Fix the "schannel not stored across client disconnects" problem.Jeremy Allison2-19/+20
Based on the Samba4 solution - stores data in $samba/private/schannel_store.tdb. This tdb is not left open but open and closed on demand. Jeremy. (This used to be commit a6d8a4b1ff31c5552075455dbd98cb58795958a9)
2007-10-10r10781: merging eventlog and svcctl code from trunkGerald Carter5-647/+1229
(This used to be commit f10aa9fb84bfac4f1a22b74d63999668700ffaac)
2007-10-10r10724: Got a little ahead of myself...Jeremy Allison1-1/+0
Jeremy. (This used to be commit 86ffef8162393be3da81fda13772f0f1d40b0d08)
2007-10-10r10722: Remove unused BOOL in struct dcinfo.Jeremy Allison1-0/+4
Ensure that the mach_acct and remote machine entries are set correctly in struct dcinfo - we'll need this as a key for a persistent schannel state later. Jeremy. (This used to be commit 47269b5c7161d740c2e86227de3acd9e08c53817)
2007-10-10r10656: BIG merge from trunk. Features not copied overGerald Carter17-2424/+3403
* \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck) (This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3)
2007-10-10r10585: variation of fix in trunk for root-free-pass in registry access checksGerald Carter1-3/+2
(This used to be commit b41f997a2a67f7dc60b300866b38f72846c600fb)
2007-10-10r10269: Server-side fix for creds change - revert jcmd's change.Jeremy Allison1-8/+2
Jeremy. (This used to be commit e1c9813d63a441037bc71622a29acda099d72f71)
2007-10-10r10264: reverse order of 'root free pass' checks in service and registry ↵Gerald Carter2-17/+12
access_checks() (This used to be commit 35b338a4fc95c14629579336dcf3bd240fda92d3)
2007-10-10r10221: add "free pass for root" in svcctl and default winreg access checksGerald Carter2-1/+17
(This used to be commit 24901187962e24bfa5ba7722aba0aeb9397ac7b6)
2007-10-10r9956: Ensure accounts with the SeAddUsersPrivilege can modify domain and ↵Gerald Carter1-8/+32
local group attributes (posted to samba ml and confirmed fix) (This used to be commit 005d4cb3c636383ccf70c4891cd7cc4bd3b48ad2)
2007-10-10r9945: fix typos.Günther Deschner1-1/+1
Guenther (This used to be commit 12029e902277053a4066eae1b3ae311fae5e6422)
2007-10-10r9788: more compiler warnings from Jason MaderGerald Carter1-2/+2
(This used to be commit 9c51aa5bd2862d73663c4148eff3080341010405)
2007-10-10r9780: Clean up a bunch of compiler warnings.James Peach2-5/+0
(This used to be commit 623d2e69319ffead31a780a4d6156dae45f386d7)
2007-10-10r9752: figured out why talloc_steal() is a bad idea for SEC_DESC*Gerald Carter1-2/+10
Add a comment so someone else doesn't get bitten by this as well. (This used to be commit 050364ef34b1e69260bd9df9e2140c45263e92f5)
2007-10-10r9739: conver the reg_objects (REGSUBKEY_CTR & REGVAL_CTR) to useGerald Carter2-202/+130
the new talloc() features: Note that the REGSUB_CTR and REGVAL_CTR objects *must* be talloc()'d since the methods use the object pointer as the talloc context for internal private data. There is no longer a regXXX_ctr_intit() and regXXX_ctr_destroy() pair of functions. Simply TALLOC_ZERO_P() and TALLOC_FREE() the object. Also had to convert the printer_info_2->NT_PRINTER_DATA field to be talloc()'d as well. This is just a stop on the road to cleaning up the printer memory management. (This used to be commit ef721333ab9639cb5346067497e99fbd0d4425dd)
2007-10-10r9660: real fix for group enumeration bug in 3.0.20; only affected the ↵Gerald Carter1-1/+1
ldapsam code (This used to be commit 62f9fb5e3a9bce539c9fedc5fdec1b8741a922c7)
2007-10-10r9594: return the mapped name in enum_dom_groups()Gerald Carter1-1/+1
(This used to be commit a769aaec88257ae006c61f0fcfd98efd4b639268)
2007-10-10r9276: Fix another unused variable warning. Bugzilla #2981.Tim Potter1-4/+1
(This used to be commit abe2ab72e6b1d53dbe04d02882e4fee9cb34dec7)
2007-10-10r9275: Remove some dead code. Bugzilla #2982.Tim Potter1-3/+0
(This used to be commit e1fc7d89c26b671e77c7cb14e03690091b671b1d)
2007-10-10r9264: fix valgrind invalid write error in enumprinterdata()Gerald Carter1-2/+3
(This used to be commit bfebbc86fc0f90e580888da25006d8e5e50b6304)
2007-10-10r9261: Fix #2976: windows member servers wouldn't alloc connections from usersJim McDonough1-0/+9
defined locally because if we didn't find them as a DC we were marking the response as authoritative. Now if it's not a domain we know, we mark the response non-authoritative. Fix from jpjanosi@us.ibm.com (This used to be commit d522277b86ff728f6f2b9feb2f8e3fa38c43d162)
2007-10-10r9242: Fix my fix for #2953. I'd moved too much code until after we verify ↵Jim McDonough1-3/+3
the user, causing netlogon to return an invalid response for failed interactive logons. (This used to be commit 4deb918b682fb51d8712cfdafc6210275dd10fc4)
2007-10-10r9229: merge from trunk:Günther Deschner1-2/+37
allow admins to uncheck the "User must change Password at next Logon" checkbox in Usermanager. Guenther (This used to be commit b1e4b72c1c36869c4dfc5ed284be24edc99f6774)
2007-10-10r9195: setting log level to 2 instead of 0Gerald Carter1-1/+1
(This used to be commit 3a633a509e8e8e5239d456960f3014172f1e4b3d)
2007-10-10r9194: do not enumerate privileges when they are not enabledGerald Carter1-1/+6
(This used to be commit ff6e3464a2df7fd8a79da8f059a080934d9b3749)
2007-10-10r9114: removing gratuitous debug messagesGerald Carter1-28/+1
(This used to be commit c3e14230387d8644152cf7e1f612a7ca7ec6f583)
2007-10-10r9112: Fix #2953 - credentials chain on DC gets out of sync with client whenJim McDonough1-5/+12
NT_STATUS_NO_USER returned. We were moving to the next step in the chain when the client wasn't. Only update when the user logs on. (This used to be commit b01a3a4111f544eef5bd678237d07a82d1ce9c22)
2007-10-10r9098: fix another usrmgr.exe crash when viewing user properties at ↵Gerald Carter1-1/+1
debuglevel 10 (This used to be commit f5756c2611df5a026d78f8acb229d7c25f1fd383)
2007-10-10r9080: If we don't understand the auth, bind nak not pdu fault.Jeremy Allison1-15/+13
Should fix usermgr on W2K3 SP1. Jeremy. (This used to be commit 592ec9fbffc704761c6b29cfc795cf3af7d5fe38)
2007-10-10r9021: Fix smbd-crash bug in openprinter (found by samba4 smbtortureGünther Deschner1-4/+10
RPC-SPOOLSS). Guenther (This used to be commit 06bfe789d54a12dfa3c46e9777f96ff7e162a9db)
2007-10-10r8971: Fix querydispinfo (still need to look at enumdomusers) to allow to listGünther Deschner1-2/+4
more then 511 users. After the rewrite, the old NT_STATUS-semantics didn't fit any longer. Guenther (This used to be commit 690da51d835fd780b16d8ce6521957146c90da78)