summaryrefslogtreecommitdiff
path: root/source3/smbd
AgeCommit message (Collapse)AuthorFilesLines
2011-11-24s3:smb2 report access_based_dir_enum in tcon replyChristian Ambach1-0/+5
let the client know when hide unreadable or hide unwriteable files is set for a share
2011-11-24s3:smb2 do not set allow_namespace_caching flag for a shareChristian Ambach1-1/+1
this matches Win7/2002R2 behavior and clients also must ignore this flag when set (MS-SMB 2.2.10), so we should not set it at all
2011-11-22Move setting the inherited ACL into the main open code path. Next willJeremy Allison1-1/+110
remove it from the ACL modules.
2011-11-22Move the "set SD" code into provided SD and "inherit acls" branches.Jeremy Allison1-29/+32
2011-11-22Only add the SD if it's not a new stream file.Jeremy Allison1-1/+1
2011-11-22Move the add security descriptor code to *after* all the other meta-data isJeremy Allison1-35/+35
updated. We may be adding an SD that restricts our own access.
2011-11-20s3:smb2_negprot: add support for SMB2_22Stefan Metzmacher1-0/+15
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Nov 20 16:46:45 CET 2011 on sn-devel-104
2011-11-16s3:smbd: calculate the negprot signing flags from the signing_stateStefan Metzmacher1-3/+10
We should map from lp_server_signing() just once in srv_init_signing(). metze Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Nov 16 18:59:49 CET 2011 on sn-devel-104
2011-11-16Final part of patchset to fix bug #8556 - ACL permissions ignored when ↵Jeremy Allison3-16/+51
SMBsetatr is requested. This now plumbs access checks through all setattr calls. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 16 04:20:04 CET 2011 on sn-devel-104
2011-11-15Remove the check for FILE_WRITE_ATTRIBUTES from smb_set_file_time(). ItJeremy Allison3-8/+17
is called from places like fileio.c that need to update the write time on a file handle only open for write, without neccessarily having FILE_WRITE_ATTRIBUTES permission. Move all checks to before the smb_set_file_time() callers.
2011-11-15Always set the attribute first, before the time.Jeremy Allison1-7/+7
2011-11-15Move handle-based access check into handle codepath.Jeremy Allison1-4/+4
2011-11-15We've already checked fsp must be non-null here.Jeremy Allison1-1/+1
2011-11-15Remove unneeded access check. This is done inside smb_set_file_time().Jeremy Allison1-4/+0
2011-11-15Remove unneeded access check. This is done inside smb_set_file_size().Jeremy Allison1-4/+0
2011-11-15Move handle based access check into handle code path.Jeremy Allison1-4/+4
2011-11-15Ensure we correctly calculate reply credits over all returnedJeremy Allison1-4/+13
SMB2 replies, and do as Windows does and return the total in the last SMB2 reply. Fixes an issue found by Christian M Ambach <christian.ambach@de.ibm.com> (and thanks to Christian for the initial patch this was based on).
2011-11-15Remove unneeded NULL check.Jeremy Allison1-4/+0
2011-11-15s3:smbd/aio: handle_aio_completed() should do nothing if aio_ex->fsp is NULLStefan Metzmacher1-0/+5
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 15 18:47:55 CET 2011 on sn-devel-104
2011-11-15s3:smbd/aio: pass ECANCELED to the smb2 aio handlersStefan Metzmacher1-1/+4
metze
2011-11-15s3:smb2_read: make it possible to cancel aio readsStefan Metzmacher1-1/+16
metze
2011-11-15s3:smb2_write: make it possible to cancel aio writesStefan Metzmacher1-1/+16
metze
2011-11-15s3:smbd/aio: add cancel_smb2_aio()Stefan Metzmacher2-0/+39
metze
2011-11-15s3:smb2_ioctl: STATUS_PENDING is defered by 1 millisecond for SMB2_IOCTLStefan Metzmacher1-1/+1
metze
2011-11-15s3:smb2_create: defer STATUS_PENDING for 2 seconds as beforeStefan Metzmacher1-1/+7
metze
2011-11-15s3:smb2_server: pass explicit defer_times to smbd_smb2_request_pending_queue()Stefan Metzmacher13-14/+15
metze
2011-11-15s3:smb2_server: always send STATUS_PENDING responses, but delayed by 0.5 ↵Stefan Metzmacher5-152/+125
milliseconds In future we'll pass the delay from the caller. metze
2011-11-14s3:smb2_flush: outbody only needs 4 bytesStefan Metzmacher1-1/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Nov 14 10:01:30 CET 2011 on sn-devel-104
2011-11-10s3: Avoid a race with the async echo handlerVolker Lendecke1-33/+28
We can not read from the echo handler socket when we have the main socket locked. This leads to the echo responder to lock up sitting in the fcntl lock while the parent wants to read the remainder of a large packet.
2011-11-10s3:smbd: don't limit the number of open dptrs for smb2 (bug #8592)Stefan Metzmacher1-3/+12
This fixes a crash bug that is triggered, when a client has more than 256 directory handles with searches. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Nov 10 14:08:14 CET 2011 on sn-devel-104
2011-11-10s3:smbd: fully construct the dptr before allocating a dnum in the bitmapStefan Metzmacher1-27/+29
metze
2011-11-10s3:smbd: avoid string_set() in dir.cStefan Metzmacher1-2/+9
And do some more error checks. metze
2011-11-09s3:smb2_server: grant credits in async interim responses (bug #8357)Stefan Metzmacher1-1/+3
The first fix for bug #8357 intruduced a regression, so that we no longer grant credits for real async interim responses with STATUS_PENDING. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 9 11:56:29 CET 2011 on sn-devel-104
2011-11-07Add the SEC_DIR_LIST check to dptr_create().Jeremy Allison1-0/+27
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Nov 7 21:11:03 CET 2011 on sn-devel-104
2011-11-05Move the SEC_DIR_LIST check into dptr_create for SMB2 and now for SMB1.Jeremy Allison2-5/+6
The pathname check still needs fixing. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Nov 5 01:38:00 CET 2011 on sn-devel-104
2011-11-04can_write_to_file() does now take share permissions into account. Fix comment.Jeremy Allison1-1/+0
2011-11-04No longer do the pre-check on DELETE_ACCESS - we're correctly checking the ↵Jeremy Allison1-22/+0
ACL every time now.
2011-11-04Remove can_access_file_acl(). We no longer need this duplicate code (hurrah!).Jeremy Allison4-56/+9
2011-11-04Remove can_access_file_data() - make it use the standard ↵Jeremy Allison2-58/+5
smbd_check_access_rights() instead.
2011-11-04Add const to the smb_filename argument of smbd_check_access_rights().Jeremy Allison3-17/+9
2011-11-04Expose smbd_check_access_rights() to other modules.Jeremy Allison2-1/+4
2011-11-04Rename smbd_check_open_rights() to smbd_check_access_rights() as we're going ↵Jeremy Allison1-15/+15
to remove the static from this.
2011-11-04Replace smb1_file_se_access_check() with just se_access_check().Jeremy Allison1-30/+21
2011-11-04Move root check out of smb1_file_se_access_check() in preparation for ↵Jeremy Allison1-13/+25
deleting this function.
2011-11-04smb1_file_se_access_check() is now static to smbd/open.cJeremy Allison2-6/+1
2011-11-04Revert "Change function signature of check_parent_access() to take char * ↵Jeremy Allison2-10/+6
instead of struct smb_filename." This reverts commit a11c0a41a35aa2b1c14333552045a65e3e50df1e. Not needed.
2011-11-04Revert "Call check_parent_access() on readdir."Jeremy Allison1-13/+0
This reverts commit a763edaf9c76afe2546c035fc090370301dd347b. Checking the wrong thing..
2011-11-04s3:smbd increase a debug levelChristian Ambach1-5/+6
logging disconnected clients with level 1 swamps the logs
2011-11-04s3:smbd: also send the server name in the negprot responseStefan Metzmacher1-0/+8
This matches W2K (at least sp4) and higher. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Nov 4 15:50:06 CET 2011 on sn-devel-104
2011-11-03s3:smbd: make use of SMB_SIGNING_* constantsStefan Metzmacher4-10/+12
metze