Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit d5c10e7dc76216db793319f9beb99dd12441e76b)
|
|
'DEBUGADD', so we don't repeat headers. (Makes them much easier to read).
(Based on patch by kai)
Andrew Bartlett
(This used to be commit 9deada345c5f89f338530c4de62835cc1eeb3d0e)
|
|
truncate.
Jeremy.
(This used to be commit 18b9cbd857177a911ef95c9322bdf0709161cd84)
|
|
are mapping system or hidden.
Jeremy.
(This used to be commit bd1e3df9ffa0717f26696a222e5ec6a0198b3352)
|
|
Jeremy.
(This used to be commit df3e467eb7cce059782870bfec222293577c4f69)
|
|
(This used to be commit 850d6573aedea6499b2f2fe9d1426083aebd9fd1)
|
|
Jeremy.
(This used to be commit d825026658b59364f9adc425bca4017be8e979e2)
|
|
Jeremy.
(This used to be commit 0385f7d7efed48fc8121fc0fbb433e9ca0954094)
|
|
Jeremy.
(This used to be commit 1f81b177182aee7fe24e50ae3cd72d417e81b45a)
|
|
Jeremy.
(This used to be commit ac21f280d5030a9c49330be37bd754a1540a238a)
|
|
option (set to false by default). Made checking for hide unreadable/writable
more efficient (less stat calls, less allocating printf calls).
Jeremy.
(This used to be commit 15ff5a48f94fdc6ed61fb10f063c4fbf8bb5bb2d)
|
|
- Don't print an uninitialised buffer in service.c
- Change some charcnv.c functions to take smb_ucs2_t ** instead of void **
- Update NTLMv2 code to use dynamic buffers
- Update experimental SMB signing code - still more work to do
- Move sys_getgrouplist() to SAFE_FREE() and do a DEBUG() on initgroups()
failure.
Andrew Bartlett
(This used to be commit de1964f7fa855022258a84556b266100b917444b)
|
|
should really check if a link points to a special file and deny access
imho), expose no fifo, socket, devices ...
(This used to be commit 59954113348cfb2061fa6bd7dfe7545f614e2891)
|
|
Jeremy.
(This used to be commit 095e2bf9469a4c26814fb049f2870983c090ed81)
|
|
populate cli structure with called name and calling name even for port
445 connects.
(This used to be commit 123eee6206d9afb28c169540dc63824957b505f4)
|
|
(This used to be commit 8c8b0dd381f357bdd204fd6b5d50b78765e93090)
|
|
(This used to be commit 667e2fe32f111ce840fe3be028c61497d54d6b3d)
|
|
Jeremy.
(This used to be commit 2c7ad907eb5e1838b6430940cb5289489fad4bb0)
|
|
IFSTEST strikes again :-).
Jeremy.
(This used to be commit 4e0a2564302bdb18087e395576208fa0f0c5c32e)
|
|
(This used to be commit 9416289b571b1c838239e5342bb6148041ab681b)
|
|
Jeremy.
(This used to be commit 31a0c4ac33e89be4a27ff697dd3850fe6578e75f)
|
|
buffer before returning ascii short name.
Jeremy.
(This used to be commit d01bbd42ff043d9fb0dc40dc4e207da8df0c9c14)
|
|
Jeremy.
(This used to be commit e53a81261ed189881c0f07e1b46f97aa6770cab7)
|
|
our authenticaion code - removing some of the duplication from the current
code.
This also gets us *much* closer to supporting a real SAM backend, becouse the
SAM can give us the right info then.
This also changes our service.c code, so that we do a VUID (rather than uid)
cache on the connection struct, and do full NT ACL/NT_TOKEN checks (or cached
equivilant) on every packet, for the same r or rw mode the whole share was open
for.
Andrew Bartlett
(This used to be commit d8122cee059fc7098bfa7e42e638a9958b3ac902)
|
|
SMB_FILE_INTERNAL_INFORMATION possibly causing the failure of one of the
IFSKIT tests.
(This used to be commit ca73d24307fcf60e4b7bfe574287b2a84c5d86c8)
|
|
Jeremy.
(This used to be commit 81eacd926bd1f7054522351e1bd24a2192dcbbc1)
|
|
half second timout rounds to 1 not 0
(This used to be commit 282a64b085162a58560175d14e7ceaef3d6cc9cc)
|
|
(This used to be commit aed32eb412cab7f6d0959f9faaaebdb320b2b6a8)
|
|
Just now it is acommandline tool like smbclient and rpcclient that is able to
perform operations on the file system passing through the vfs layer
It is not complete yet, some functions have simply faked up data, but module
loading works yet and basic operations too.
Thanks to Eric Lorimer for helping out with the initial setup.
Simo.
(This used to be commit 42ae5eb82657d4905bdaf247286f95599380afbb)
|
|
(This used to be commit 01d35694ae0497ee11a7677eecc597336e6b59ca)
|
|
since 1998 and nobody noticed. It means that sometimes smbd would sit
there forever, and smbd would never get the timing part of blocking
locks right.
(This used to be commit 5d4df58b6d4de548d8aa0a49ec307dce7cd1515a)
|
|
we previously expected, rather than the LM based key.
A Win2k SPNEGO enabled join goes a *lot* further with this option on.
Andrew Bartlett
(This used to be commit b224938e4e843288630cdc7c3c3931b241bd0e1a)
|
|
(This used to be commit fb28abd120310a591bdf5fa1afc5521443c3d34c)
|
|
(This used to be commit 8955f3d63a9d9e5da76331996fba42dc105737da)
|
|
actually work. Also, the idea of 'loopback winbind' isn't that bad an idea
anyway (potential PDC/BDC applications).
Given all that, remove it...
Andrew Bartlett
(This used to be commit fc0d6e53fce1d05b16ec58c0bdc38aa8da4422c0)
|
|
with an empty string, not a NULL pointer...
Also, check for security=ads before giving a kerberos spnego response.
(This used to be commit 6eca417d1c29c7c18455f8290cad86fb1444e615)
|
|
Andrew Bartlett
(This used to be commit 23f332178526877e9670515eb7c614b81fca21a9)
|
|
exactly were you trying to do here?
Andrew Bartlett
(This used to be commit 81b675b54d86d196fb2035dc5d22781160518beb)
|
|
Tridge suggested a generic caching mechanism for Samba to avoid the
proliferation of little cache files hanging around limpet like in the
locks directory. Someone should probably implement this at some
stage.
(This used to be commit dad31483b3bd1790356ef1e40ac62624a403bce8)
|
|
from win2k AND still use SPNEGO (provided you don't build with kerberos...I
still have to fix that, as we are not properly falling back).
(This used to be commit 1f9b3d46c7c99e84b2983220f79613b7420c5ced)
|
|
check for POSIX errors in the blocking lock code as we may have never made
a POSIX call (could have denied lock before POSIX checked).
Jeremy.
(This used to be commit 8403253f277299f566f2931fdec53b6e4ece376e)
|
|
(This used to be commit cbb6e2fbdb42964107cf033c787a32cedd46e5d8)
|
|
the new accessor functions.
Andrew Bartlett
(This used to be commit f393de2310e997d05674eb7f1268655373e03647)
|
|
future.
This moves us from fstrcpy() and global variables to 'get' and 'set' functions.
In particular, the 'set' function sainity-checks the input, in the same way as
we always have.
Andrew Bartlett
(This used to be commit e57a896f06b16fe7e336e1ae63a0c9e4cc75fd36)
|
|
setups.
- split up the ads structure into logical pieces. This makes it much
easier to keep things like the authentication realm and the server
realm separate (they can be different).
- allow ads callers to specify that no sasl bind should be performed
(used by "net ads info" for example)
- fix an error with handing ADS_ERROR_SYSTEM() when errno is 0
- completely rewrote the code for finding the LDAP server. Now try DNS
methods first, and try all DNS servers returned from the SRV DNS
query, sorted by closeness to our interfaces (using the same sort code
as we use in replies from WINS servers). This allows us to cope with
ADS DCs that are down, and ensures we don't pick one that is on the
other side of the country unless absolutely necessary.
- recognise dnsRecords as binary when displaying them
- cope with the realm not being configured in smb.conf (work it out
from the LDAP server)
- look at the trustDirection when looking up trusted domains and don't
include trusts that trust our domains but we don't trust
theirs.
- use LDAP to query the alternate (netbios) name for a realm, and make
sure that both and long and short forms of the name are accepted by
winbindd. Use the short form by default for listing users/groups.
- rescan the list of trusted domains every 5 minutes in case new trust
relationships are added while winbindd is running
- include transient trust relationships (ie. C trusts B, B trusts A,
so C trusts A) in winbindd.
- don't do a gratuituous node status lookup when finding an ADS DC (we
don't need it and it could fail)
- remove unused sid_to_distinguished_name function
- make sure we find the allternate name of our primary domain when
operating with a netbiosless ADS DC (using LDAP to do the lookup)
- fixed the rpc trusted domain enumeration to support up to approx
2000 trusted domains (the old limit was 3)
- use the IP for the remote_machine (%m) macro when the client doesn't
supply us with a name via a netbios session request (eg. port 445)
- if the client uses SPNEGO then use the machine name from the SPNEGO
auth packet for remote_machine (%m) macro
- add new 'net ads workgroup' command to find the netbios workgroup
name for a realm
(This used to be commit e358d7b24c86a46d8c361b9e32a25d4f71a6dc00)
|
|
(This used to be commit 7bf9ca6ca36fa319a57eab05567d49a003237bb5)
|
|
(This used to be commit 81322f4d63095d828be7983eb4b47775abe8d33f)
|
|
(This used to be commit cf2abf677ed9942d841ef61ffb2565244c8979ac)
|
|
longer than the buffer they claim to be in.
Many thanks to tridge for explaining the macros.
Andrew Bartlett
(This used to be commit 3efd462bf2f1ed50c108c2b8ddecc461d002745d)
|
|
for spotting this)
(This used to be commit d4c905e5a0a67c8e01a4fcf78aa992a3b7beff02)
|