summaryrefslogtreecommitdiff
path: root/source3/smbd
AgeCommit message (Collapse)AuthorFilesLines
2008-01-06Remove superfluous parameter fd from SMB_VFS_FSET_NT_ACL().Michael Adam2-4/+2
Michael (This used to be commit 4f2d139a186048f08180378a877b69d2f80ad51f)
2008-01-06Remove superfluous fd parameter from SMB_VFS_FGET_NT_ACL().Michael Adam2-3/+3
Michael (This used to be commit c0c7c1223da29c68359dac64a340c1c710d5f3d2)
2008-01-05Fix %d / size_t printf arg missmatch.Jeremy Allison1-2/+2
Jeremy. (This used to be commit 3e3205309b75edf7d29633525adfdceb5f8856eb)
2008-01-04Using a bool with a logical operation. IBM checker caught.Jeremy Allison1-1/+1
Jeremy. (This used to be commit 7f9fe7da1e25bcc730f4c4226bf77f6d39b5ace4)
2008-01-04Can't use logical operations on boolean values.Jeremy Allison1-1/+3
Jeremy. (This used to be commit 34cd9b5b51a4209b4d970eb90bf1db0eb24a60bb)
2008-01-04Now conn is part of smb_request, we don't need it asJeremy Allison8-100/+131
an extra parameter. This cleans up quite a few places we were passing it around without needing it. Jeremy. (This used to be commit 8f36def18e9f980e8db522e1de41e80cfd5f466e)
2008-01-04We dont' modify the smb header for crypto anymore.Jeremy Allison1-1/+1
Jeremy. (This used to be commit f5b6b6dac66b4ecc113985a7e7db1855b324c465)
2008-01-04Fix interesting bug found with make valgrindtest. When cancellingJeremy Allison1-10/+14
a lock due to file closure make sure we null out the fsp pointer so it isn't dangling. This is an old bug (not related to the new changes). Jeremy. (This used to be commit b5ee972b0c04b4d119573d95ac458a3b6be30c5c)
2008-01-04Refactor the crypto code after a very helpful conversationJeremy Allison15-236/+345
with Volker. Mostly making sure we have data on the incoming packet type, not stored in the smb header. Jeremy. (This used to be commit c4e5a505043965eec77b5bb9bc60957e8f3b97c8)
2008-01-02Convert call_trans2open to create_file()Volker Lendecke1-57/+16
(This used to be commit 22138572bd2b9ae379b01098566e38e132653968)
2008-01-02Convert reply_mknew to create_fileVolker Lendecke1-38/+16
(This used to be commit 1b1cea9ef04a85a2fdd3c8574f7c4db559b7d9b6)
2008-01-02Convert reply_open_and_X to create_fileVolker Lendecke1-42/+19
(This used to be commit fa09b9ab26657af9bd6dcf3fcc7311d5983a591d)
2008-01-02Convert reply_open to create_fileVolker Lendecke1-40/+19
(This used to be commit 209c696ab8490564ec9e30f6f07b9c72af3ed2e1)
2008-01-01Use NULL instead of 0Volker Lendecke1-4/+4
"struct security_descriptor" has pointers, not integers inside (This used to be commit 13158014e3b05e44eea897fbcf470957301c5c97)
2007-12-30As the encryption is stream based there's no reasonJeremy Allison2-5/+16
oplock breaks can't be encrypted. If we have multiple contexts I should probably attach them to the connection struct, but for now use the global context number. Jeremy. (This used to be commit 5b4b335ed0d1dc738f1f099e5c638361f3aede07)
2007-12-29Allow encryption context setup on IPC$.Jeremy Allison1-7/+27
Jeremy. (This used to be commit 5d424cb3060af89bde50bc7fe2989e3c1b8e91b2)
2007-12-29Remove tiny code duplicationVolker Lendecke1-1/+1
ndr_size_security_descriptor does the same as sec_desc_size (This used to be commit bc3bd7a8e7c6e9e27acb195c86abb92c0f53112f)
2007-12-29Remove tiny code duplicationVolker Lendecke2-5/+6
sid_size did the same as ndr_size_dom_sid (This used to be commit 8aec5d09ba023413bd8ecbdfbc7d23904df94389)
2007-12-29Apply some constVolker Lendecke1-4/+4
(This used to be commit 241b72141e3d9e31e30977517f871a97d74bbf7d)
2007-12-28Remove a static arrayVolker Lendecke1-6/+6
This might be worth it, mangle_hash is hardly used these days (This used to be commit 44775ea38bc320ac8e2208769a8cde2c6f44f640)
2007-12-28Ensure we turn off POSIX large read/write if encryptionJeremy Allison1-1/+4
is mandatory or signing is on. Jeremy. (This used to be commit 5088b704791be2f36641fa0ec59dff7f289ae868)
2007-12-27Add the capability to set "smb encrypt = required"Jeremy Allison3-1/+44
on a share (or global) and have the server reply with ACCESS_DENIED for all non-encrypted traffic (except that used to query encryption requirements and set encryption state). Jeremy. (This used to be commit d241bfa57729bb934ada6beabf842a2ca7b4f8a2)
2007-12-28Fix setting the initial permission bitsVolker Lendecke2-6/+25
This fixes a make test failure on Solaris. When creating a new file, file_set_dosmode() called from open_file_ntcreate calculates a new permission mask, very likely different from what had been calculated in open_file_ntcreate. Further down we overwrote the newly calculated value with SMB_FCHMOD_ACL, ignoring what file_set_dosmode had calculated. Why did Linux not see this? fchmod_acl on a newly created file without acls would not retrieve an acl at all, whereas under Solaris acl(2) returns something even for files with just posix permissions returns something. Jeremy, given that we have very similar code in 3.0.28 this might also explain some of the bug reports that people have concerning ACLs on new files. Volker P.S: This one took a while to find... (This used to be commit 2135dfe91bf1ae114a18c15286b535662200677d)
2007-12-27Add "smb encrypt" parameter. Can be set to "no, yes, required".Jeremy Allison1-1/+24
Currently if set required this is not enforced. I'll be adding that soon. Jeremy. (This used to be commit df7e447623ac03d81bec384f5cfe83c3976cf7b2)
2007-12-27Fix the buildVolker Lendecke1-2/+3
(This used to be commit 7fb858b350856d626fed6f062029fcf09b8251e2)
2007-12-27Add CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP capability toJeremy Allison1-1/+5
our reported caps. Jeremy. (This used to be commit e86d027823c85173c64e7b85406e98f6f7345b10)
2007-12-26Add SMB encryption. Still fixing client decrypt butJeremy Allison9-74/+869
negotiation works. Jeremy. (This used to be commit d78045601af787731f0737b8627450018902b104)
2007-12-26We need to return the correct atimeVolker Lendecke1-1/+6
On systems with nanosecond atime we need to re-stat after messing with the fd, at least Solaris 10 updates atime after we stat(2)ed the file. (This used to be commit 6e6ec0a563f8b7e3d4618ce60e776bcce53f40c4)
2007-12-22If we detect a case insensitive filesystem makeJeremy Allison1-4/+11
sure we don't search directories on name misses for non-mangled names. Jeremy (This used to be commit 120048d2f40cf1a0ace2ecde205cbc694d263d69)
2007-12-22Use filesystem capabilities to support case-insensitive filesystems.James Peach2-17/+30
If we know the underlying filesystem is case-insensitive, then we know that it won't help to search for case variations of the requested name. Jeremy, please review (and revert if you disagree). (This used to be commit 9e8b8f8c16612d8a08b55802f4fd9afca5498a7c)
2007-12-22Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-testJames Peach6-21/+28
(This used to be commit 30cb2d215f1a4a440d5ecaab3f898daa714eee2b)
2007-12-22Cache the underlying filesystem capabilities at connection time.James Peach1-0/+15
This change alters the Samba connection code to cache the filesystem capabilities when a new client connects. This can be used to enable filesystem specific optimisations is a general manner. (This used to be commit de3c5b808a941ac8e9ebe7169536d8290067eef5)
2007-12-22Remove redundant connection_struct from check_magic() parameter list.Michael Adam1-2/+3
Michael (This used to be commit cebaa483e62910ac3f87cd135b2aff18dc880416)
2007-12-22Remove redundant connection_struct from fd_close() parameter list.Michael Adam2-12/+12
Michael (This used to be commit 3611cc8561cf837adea83fc7c16ca7535f188466)
2007-12-22Remove redundant connection_struct from fd_close_posix() parameter list.Michael Adam1-1/+1
Michael (This used to be commit f3365b74ac016eaee1e82eef769dd618af5df201)
2007-12-21Some C++ fixesVolker Lendecke1-3/+3
(This used to be commit 5c392c4c6e277a24d0d477902dc7856b2b46ee53)
2007-12-21Some C++ warningsVolker Lendecke1-2/+2
(This used to be commit 5ab82d4f574f2a2e2761e9e414c66a70aeffb05d)
2007-12-21Fix a C++ warningVolker Lendecke1-1/+1
(This used to be commit 7e1d9b561f6df233b8c7eaec83d1e4207b5a2fb0)
2007-12-21Add a global cacheVolker Lendecke1-0/+6
It hurts, but I think this global variable is necessary for transition, and it has the potential to remove quite a few other global variables without messing with APIs too much. (This used to be commit c131d0dc52ec09c9227eff3d68877369c37aaed5)
2007-12-20Fix typo in filesystem capabilities bits.James Peach1-3/+1
(This used to be commit 08fee0d28a20648d74c6b03d120eaf628f4de70c)
2007-12-20Attempt to fix the buildVolker Lendecke1-0/+2
James, at least on my Linux system neither FILE_CASE_SENSITIVE_SEARCH nor FILE_CASE_PRESERVING_NAMES seem to be defined anywhere. Is it possible that this is a MacOS/X specific thing? If so, could you add configure tests for this? Thanks, Volker (This used to be commit 465fd4385013c95f9778d710d70796feae4eb858)
2007-12-19Fix a couple of warnings in mDNS registration. One of these is anJames Peach1-2/+1
actual bug where we pass a pointer instead of a pointer to a pointer. (This used to be commit 36db6755103f01cb74bf4194fc81ca6d4b5320e4)
2007-12-19Add filesystem capabilities bitmask to statfs info.James Peach1-0/+85
This patch adds Darwin support for the Samba statfs VFS call. It also adds a filesystem capabilities bitmask to the information returned by the call. (This used to be commit 555173eb3f6511e88798d6ef3d1fed0c219a9921)
2007-12-19Expose per-fsp extension talloc context.James Peach1-2/+14
This patch supplements the fsp extension API with an operation to retrieve the malloc zone pointer for that fsp. (This used to be commit d5d9e4084cfb3db3bebff0334b93f376022ef5d3)
2007-12-19Release per-fsp data on file closure.James Peach1-0/+5
(This used to be commit 9fead46b54519b3df78a869dbc99207046587d6a)
2007-12-19Change the prototype of the vfs function get_nt_acl().Michael Adam3-64/+7
Up to now, get_nt_acl() took a files_struct pointer (fsp) and a file name. All the underlying functions should need and now do need (after the previous preparatory work), is a connection_struct and a file name. The connection_struct is already there in the vfs_handle passed to the vfs functions. So the files_struct argument can be eliminated. This eliminates the need of calling open_file_stat in a couple of places to produce the fsp needed. Michael (This used to be commit b5f600fab53c9d159a958c59795db3ba4a8acc63)
2007-12-19Split get_nt_acl() into two functions: fsp- and non-fsp variant.Michael Adam1-63/+148
Replace smbd/posix_acls.c:get_nt_acl() by two funcions: posix_get_nt_acl() and posix_fget_nt_acl(). The first takes a connection struct and a file name instead of a files_struct pointer. This is in preparation of changing the vfs api for SMB_VFS_GET_NT_ACL. Michael (This used to be commit 50c82cc1456736fa634fb656e63555319742f725)
2007-12-19Remove the "is_directory" parameter from canonicalise_acl():Michael Adam1-7/+9
It can be retrieved from the stat buffer. Michael (This used to be commit b0ae830bf57dcaec00b2a2eabfec7221a3b7f791)
2007-12-19Change canonicalise_acl() to not take an fsp.Michael Adam1-8/+15
Convert canonicalise_acl() to take connection_struct, is_directory and file name instead of files_struct pointer. Michael (This used to be commit d579a7f84fd47a3f00215725cecd65b21a5ff2e0)
2007-12-19Change ensure_canon_entry_valid() to not take and fsp.Michael Adam1-10/+11
Convert ensure_canon_entry_valid() to take share_params and an is_directory flag instead of an files_struct pointer. Michael (This used to be commit bdb208124bd703edee03ac4d2a4ec45ecdfc135e)