summaryrefslogtreecommitdiff
path: root/source3/smbd
AgeCommit message (Collapse)AuthorFilesLines
2012-03-04s3-smbd: vuser and session_info cannot be NULL hereAndrew Bartlett1-37/+31
The callers always supply it. (this is a hold-over from the security=share removal). Andrew Bartlett
2012-03-04s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett10-613/+63
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-03-04s3:smbd/globals.h: remove unused pollfd pointerStefan Metzmacher1-6/+0
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Mar 4 23:18:10 CET 2012 on sn-devel-104
2012-03-04change low FDs are handled in SambaAndrew Bartlett1-10/+2
We now only close fds 0, 1, 2 when we are a forked daemon, and take care not to close a file descriptor that we might need for foreground stdin monitoring. This should fix stdout logging in the lsa and epmapper deamons (ie in make test). Andrew Bartlett
2012-03-03s3:smbd:smb2_write: improve logging in the error caseMichael Adam1-4/+14
2012-03-02s3:smb2_server: use SMB2_WATCH_TREEChristian Ambach1-1/+1
it makes the code easier to understand if it uses the names specified in MS-SMB2 instead of just the underlying values
2012-03-02s3:smb2_server fix a typoChristian Ambach1-1/+1
2012-03-03s3: Fix some blank line endingsVolker Lendecke1-5/+5
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Sat Mar 3 03:41:03 CET 2012 on sn-devel-104
2012-03-02s3: Further fix for bug 8777Brad Smith1-2/+2
2012-03-02s3: Enable statvfs usage on NetBSDVolker Lendecke1-30/+30
linux_statvfs is pretty much what you use when you have susv4. No real code change, this moves linux_statvfs to the bottom of the (LINUX) to #ifdef (STAT_STAVFS).
2012-03-01Add open_dir_with_privilege() to ensure we're opening the correct directory ↵Jeremy Allison5-3/+72
when doing backup requests. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Mar 1 03:50:40 CET 2012 on sn-devel-104
2012-02-29Implement FLAG_TRANS2_FIND_BACKUP_INTENT for trans2 with privileges.Jeremy Allison1-4/+46
2012-02-29Add accessor functions to set a bool "priv" on a directory handle. Not yet ↵Jeremy Allison2-0/+13
used, but will be part of FLAG_TRANS2_FIND_BACKUP_INTENT code.
2012-02-29Add the implementation of check_reduced_name_with_privilege(). Now to plumb intoJeremy Allison4-8/+161
SMB1 requests.
2012-02-29Add check_reduced_name_with_privilege(), filename_convert_with_privilege() ↵Jeremy Allison3-5/+103
(currently unimplemented) in order to prepare for adding SeBackup/SeRestore code to the main fileserver. Not yet plumbed into the main SMB1/SMB2 code.
2012-02-29s3: Introduce "req" helper var in reply_lockingX_successVolker Lendecke1-3/+5
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Wed Feb 29 03:08:53 CET 2012 on sn-devel-104
2012-02-29s3: Fix a const warningVolker Lendecke1-1/+1
2012-02-28s3: More fix for smbd -iVolker Lendecke1-1/+1
We need a full re-initialize, otherwise we don't re-init the USR1 signal handler
2012-02-28Fix problem reported by Tom Lee <tlee2951@gmail.com> - when calculatingJeremy Allison1-3/+28
the share security mask, take priviliges into account for the connecting user. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Feb 28 20:21:26 CET 2012 on sn-devel-104
2012-02-28smbd: detect EOF on stdin in --foreground modeAndrew Tridgell1-0/+25
if EOF is detected on stdin then exit
2012-02-27libcli/smb/smb2_signing: pass down 'protocol' to smb2_signing_[sign|check]_pdu()Stefan Metzmacher1-0/+4
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Feb 27 14:26:32 CET 2012 on sn-devel-104
2012-02-27s3-param: Align lp_{max,min}protocol with lib/param namesAndrew Bartlett3-12/+12
This adds an alisas to ensure that both our loadparm systems know all the names. I would like to move to the 'server ..' name as canonical, and this will be raised on the list. Andrew Bartlett
2012-02-25s3: Fix a typoVolker Lendecke1-1/+1
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Sat Feb 25 11:16:41 CET 2012 on sn-devel-104
2012-02-25s3: Fix bug 8777, sys_statvfs() wrapper support for OpenBSD/FreeBSD/DragonFlyBrad Smith1-3/+40
2012-02-25s3-auth rename vuid_serverinfo to session_infoAndrew Bartlett1-8/+8
This matches the name used elsewhere in the code. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sat Feb 25 05:24:19 CET 2012 on sn-devel-104
2012-02-25Move dptr code over to TALLOC.Jeremy Allison1-18/+9
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Feb 25 03:50:24 CET 2012 on sn-devel-104
2012-02-24Make dptr_path() and dptr_wcard() const.Jeremy Allison3-7/+5
2012-02-24Fix const warnings.Jeremy Allison1-2/+2
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Feb 24 23:10:56 CET 2012 on sn-devel-104
2012-02-24s3: Simplify smb_splice_chainVolker Lendecke1-16/+13
No code change, just remove a {} block left over as the else branch from the previous commit Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Fri Feb 24 18:07:48 CET 2012 on sn-devel-104
2012-02-24s3: Simplify smb_splice_chainVolker Lendecke1-12/+2
first_request won't be true anymore, we always splice fully existing records in smbd
2012-02-24s3: Simplify smb_splice_chainVolker Lendecke1-13/+2
With the last commit, bytes_padding is not set anymore
2012-02-24s3: Simplify smb_splice_chainVolker Lendecke1-7/+1
bytes_alignment used to be used in libsmb, which uses different code now
2012-02-24s3: Simplify smb_splice_chainVolker Lendecke1-25/+11
We use it in smbd/process.c only now. This only splices in finished buffers, both callers used the same arguments. Pull that into the routine itself.
2012-02-24s3: Turn some SMB_ASSERTS into proper returnVolker Lendecke1-2/+6
We deal with the error properly further up
2012-02-24s3: Fix a DEBUG msgVolker Lendecke1-1/+1
2012-02-23s3:smbd/utmp.c - fix the build on FreeBSD 9 without utmp.hMatthias Dieter Wallnöfer1-0/+2
https://bugzilla.samba.org/show_bug.cgi?id=8709 Reviewed-by: Jelmer Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Feb 23 19:17:25 CET 2012 on sn-devel-104
2012-02-23s3: smb_request->vwv can be constVolker Lendecke1-1/+1
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Thu Feb 23 12:37:23 CET 2012 on sn-devel-104
2012-02-21s3: Fix smbd -iVolker Lendecke1-0/+1
We end up in a nested event loop without this. Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Tue Feb 21 17:24:28 CET 2012 on sn-devel-104
2012-02-21s3: Fix typosVolker Lendecke1-2/+2
2012-02-19s3: Remove a pointless else branchVolker Lendecke1-2/+1
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Sun Feb 19 23:14:15 CET 2012 on sn-devel-104
2012-02-19s3: get_share_mode_lock_fresh->get_share_mode_lockVolker Lendecke1-9/+9
get_share_mode_lock_fresh is just a confusing name Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Sun Feb 19 19:16:41 CET 2012 on sn-devel-104
2012-02-19s3: get_share_mode_lock->get_existing_share_mode_lockVolker Lendecke5-9/+10
2012-02-18Fix a bunch of "unused variable" warnings.Jeremy Allison12-37/+0
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Feb 18 06:22:40 CET 2012 on sn-devel-104
2012-02-17s3-auth: Add extra error messages on authentication or authorization failureAndrew Bartlett1-0/+3
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-02-17Replace smbd_server_connection_loop_once() with tevent_loop_once() directly.Jeremy Allison1-63/+6
We no longer need to call poll() directly inside smbd ! Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Feb 17 02:49:13 CET 2012 on sn-devel-104
2012-02-16lib/util: Remove sys_poll as it is no longer neededAndrew Bartlett1-1/+1
sys_poll() is only needed if the signal pipe is set up and used, but as no signal handler ever writes to the pipe, this can all be removed. signal based events are now handled via tevent. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
2012-02-16s3-smbd Remove unused code now we always have SPNEGO via gensecAndrew Bartlett4-49/+7
This was previously needed because SPNEGO was only available in the AD DC. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-02-16Rename obscure defined constants.Christopher R. Hertel (crh)1-2/+2
Replaced the undescriptive SMB_PORT1 and SMB_PORT2 defined constants with the slightly more descriptive names NBT_SMB_PORT and TCP_SMB_PORT. Also replaced several hard-coded references to the well-known port numbers (139 and 445, respectively) as appropriate. Small changes to clarify some comments regarding the two transport types. Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Feb 16 08:29:41 CET 2012 on sn-devel-104
2012-02-16s3-smbd: Avoid starting log lines with the word 'error'Andrew Bartlett1-2/+10
2012-02-15s3: Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY, bug 8760Volker Lendecke1-4/+2
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Feb 15 21:10:22 CET 2012 on sn-devel-104