summaryrefslogtreecommitdiff
path: root/source3/smbd
AgeCommit message (Collapse)AuthorFilesLines
2008-01-04Refactor the crypto code after a very helpful conversationJeremy Allison15-236/+345
with Volker. Mostly making sure we have data on the incoming packet type, not stored in the smb header. Jeremy. (This used to be commit c4e5a505043965eec77b5bb9bc60957e8f3b97c8)
2008-01-02Convert call_trans2open to create_file()Volker Lendecke1-57/+16
(This used to be commit 22138572bd2b9ae379b01098566e38e132653968)
2008-01-02Convert reply_mknew to create_fileVolker Lendecke1-38/+16
(This used to be commit 1b1cea9ef04a85a2fdd3c8574f7c4db559b7d9b6)
2008-01-02Convert reply_open_and_X to create_fileVolker Lendecke1-42/+19
(This used to be commit fa09b9ab26657af9bd6dcf3fcc7311d5983a591d)
2008-01-02Convert reply_open to create_fileVolker Lendecke1-40/+19
(This used to be commit 209c696ab8490564ec9e30f6f07b9c72af3ed2e1)
2008-01-01Use NULL instead of 0Volker Lendecke1-4/+4
"struct security_descriptor" has pointers, not integers inside (This used to be commit 13158014e3b05e44eea897fbcf470957301c5c97)
2007-12-30As the encryption is stream based there's no reasonJeremy Allison2-5/+16
oplock breaks can't be encrypted. If we have multiple contexts I should probably attach them to the connection struct, but for now use the global context number. Jeremy. (This used to be commit 5b4b335ed0d1dc738f1f099e5c638361f3aede07)
2007-12-29Allow encryption context setup on IPC$.Jeremy Allison1-7/+27
Jeremy. (This used to be commit 5d424cb3060af89bde50bc7fe2989e3c1b8e91b2)
2007-12-29Remove tiny code duplicationVolker Lendecke1-1/+1
ndr_size_security_descriptor does the same as sec_desc_size (This used to be commit bc3bd7a8e7c6e9e27acb195c86abb92c0f53112f)
2007-12-29Remove tiny code duplicationVolker Lendecke2-5/+6
sid_size did the same as ndr_size_dom_sid (This used to be commit 8aec5d09ba023413bd8ecbdfbc7d23904df94389)
2007-12-29Apply some constVolker Lendecke1-4/+4
(This used to be commit 241b72141e3d9e31e30977517f871a97d74bbf7d)
2007-12-28Remove a static arrayVolker Lendecke1-6/+6
This might be worth it, mangle_hash is hardly used these days (This used to be commit 44775ea38bc320ac8e2208769a8cde2c6f44f640)
2007-12-28Ensure we turn off POSIX large read/write if encryptionJeremy Allison1-1/+4
is mandatory or signing is on. Jeremy. (This used to be commit 5088b704791be2f36641fa0ec59dff7f289ae868)
2007-12-27Add the capability to set "smb encrypt = required"Jeremy Allison3-1/+44
on a share (or global) and have the server reply with ACCESS_DENIED for all non-encrypted traffic (except that used to query encryption requirements and set encryption state). Jeremy. (This used to be commit d241bfa57729bb934ada6beabf842a2ca7b4f8a2)
2007-12-28Fix setting the initial permission bitsVolker Lendecke2-6/+25
This fixes a make test failure on Solaris. When creating a new file, file_set_dosmode() called from open_file_ntcreate calculates a new permission mask, very likely different from what had been calculated in open_file_ntcreate. Further down we overwrote the newly calculated value with SMB_FCHMOD_ACL, ignoring what file_set_dosmode had calculated. Why did Linux not see this? fchmod_acl on a newly created file without acls would not retrieve an acl at all, whereas under Solaris acl(2) returns something even for files with just posix permissions returns something. Jeremy, given that we have very similar code in 3.0.28 this might also explain some of the bug reports that people have concerning ACLs on new files. Volker P.S: This one took a while to find... (This used to be commit 2135dfe91bf1ae114a18c15286b535662200677d)
2007-12-27Add "smb encrypt" parameter. Can be set to "no, yes, required".Jeremy Allison1-1/+24
Currently if set required this is not enforced. I'll be adding that soon. Jeremy. (This used to be commit df7e447623ac03d81bec384f5cfe83c3976cf7b2)
2007-12-27Fix the buildVolker Lendecke1-2/+3
(This used to be commit 7fb858b350856d626fed6f062029fcf09b8251e2)
2007-12-27Add CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP capability toJeremy Allison1-1/+5
our reported caps. Jeremy. (This used to be commit e86d027823c85173c64e7b85406e98f6f7345b10)
2007-12-26Add SMB encryption. Still fixing client decrypt butJeremy Allison9-74/+869
negotiation works. Jeremy. (This used to be commit d78045601af787731f0737b8627450018902b104)
2007-12-26We need to return the correct atimeVolker Lendecke1-1/+6
On systems with nanosecond atime we need to re-stat after messing with the fd, at least Solaris 10 updates atime after we stat(2)ed the file. (This used to be commit 6e6ec0a563f8b7e3d4618ce60e776bcce53f40c4)
2007-12-22If we detect a case insensitive filesystem makeJeremy Allison1-4/+11
sure we don't search directories on name misses for non-mangled names. Jeremy (This used to be commit 120048d2f40cf1a0ace2ecde205cbc694d263d69)
2007-12-22Use filesystem capabilities to support case-insensitive filesystems.James Peach2-17/+30
If we know the underlying filesystem is case-insensitive, then we know that it won't help to search for case variations of the requested name. Jeremy, please review (and revert if you disagree). (This used to be commit 9e8b8f8c16612d8a08b55802f4fd9afca5498a7c)
2007-12-22Merge branch 'v3-2-test' of git://git.samba.org/samba into v3-2-testJames Peach6-21/+28
(This used to be commit 30cb2d215f1a4a440d5ecaab3f898daa714eee2b)
2007-12-22Cache the underlying filesystem capabilities at connection time.James Peach1-0/+15
This change alters the Samba connection code to cache the filesystem capabilities when a new client connects. This can be used to enable filesystem specific optimisations is a general manner. (This used to be commit de3c5b808a941ac8e9ebe7169536d8290067eef5)
2007-12-22Remove redundant connection_struct from check_magic() parameter list.Michael Adam1-2/+3
Michael (This used to be commit cebaa483e62910ac3f87cd135b2aff18dc880416)
2007-12-22Remove redundant connection_struct from fd_close() parameter list.Michael Adam2-12/+12
Michael (This used to be commit 3611cc8561cf837adea83fc7c16ca7535f188466)
2007-12-22Remove redundant connection_struct from fd_close_posix() parameter list.Michael Adam1-1/+1
Michael (This used to be commit f3365b74ac016eaee1e82eef769dd618af5df201)
2007-12-21Some C++ fixesVolker Lendecke1-3/+3
(This used to be commit 5c392c4c6e277a24d0d477902dc7856b2b46ee53)
2007-12-21Some C++ warningsVolker Lendecke1-2/+2
(This used to be commit 5ab82d4f574f2a2e2761e9e414c66a70aeffb05d)
2007-12-21Fix a C++ warningVolker Lendecke1-1/+1
(This used to be commit 7e1d9b561f6df233b8c7eaec83d1e4207b5a2fb0)
2007-12-21Add a global cacheVolker Lendecke1-0/+6
It hurts, but I think this global variable is necessary for transition, and it has the potential to remove quite a few other global variables without messing with APIs too much. (This used to be commit c131d0dc52ec09c9227eff3d68877369c37aaed5)
2007-12-20Fix typo in filesystem capabilities bits.James Peach1-3/+1
(This used to be commit 08fee0d28a20648d74c6b03d120eaf628f4de70c)
2007-12-20Attempt to fix the buildVolker Lendecke1-0/+2
James, at least on my Linux system neither FILE_CASE_SENSITIVE_SEARCH nor FILE_CASE_PRESERVING_NAMES seem to be defined anywhere. Is it possible that this is a MacOS/X specific thing? If so, could you add configure tests for this? Thanks, Volker (This used to be commit 465fd4385013c95f9778d710d70796feae4eb858)
2007-12-19Fix a couple of warnings in mDNS registration. One of these is anJames Peach1-2/+1
actual bug where we pass a pointer instead of a pointer to a pointer. (This used to be commit 36db6755103f01cb74bf4194fc81ca6d4b5320e4)
2007-12-19Add filesystem capabilities bitmask to statfs info.James Peach1-0/+85
This patch adds Darwin support for the Samba statfs VFS call. It also adds a filesystem capabilities bitmask to the information returned by the call. (This used to be commit 555173eb3f6511e88798d6ef3d1fed0c219a9921)
2007-12-19Expose per-fsp extension talloc context.James Peach1-2/+14
This patch supplements the fsp extension API with an operation to retrieve the malloc zone pointer for that fsp. (This used to be commit d5d9e4084cfb3db3bebff0334b93f376022ef5d3)
2007-12-19Release per-fsp data on file closure.James Peach1-0/+5
(This used to be commit 9fead46b54519b3df78a869dbc99207046587d6a)
2007-12-19Change the prototype of the vfs function get_nt_acl().Michael Adam3-64/+7
Up to now, get_nt_acl() took a files_struct pointer (fsp) and a file name. All the underlying functions should need and now do need (after the previous preparatory work), is a connection_struct and a file name. The connection_struct is already there in the vfs_handle passed to the vfs functions. So the files_struct argument can be eliminated. This eliminates the need of calling open_file_stat in a couple of places to produce the fsp needed. Michael (This used to be commit b5f600fab53c9d159a958c59795db3ba4a8acc63)
2007-12-19Split get_nt_acl() into two functions: fsp- and non-fsp variant.Michael Adam1-63/+148
Replace smbd/posix_acls.c:get_nt_acl() by two funcions: posix_get_nt_acl() and posix_fget_nt_acl(). The first takes a connection struct and a file name instead of a files_struct pointer. This is in preparation of changing the vfs api for SMB_VFS_GET_NT_ACL. Michael (This used to be commit 50c82cc1456736fa634fb656e63555319742f725)
2007-12-19Remove the "is_directory" parameter from canonicalise_acl():Michael Adam1-7/+9
It can be retrieved from the stat buffer. Michael (This used to be commit b0ae830bf57dcaec00b2a2eabfec7221a3b7f791)
2007-12-19Change canonicalise_acl() to not take an fsp.Michael Adam1-8/+15
Convert canonicalise_acl() to take connection_struct, is_directory and file name instead of files_struct pointer. Michael (This used to be commit d579a7f84fd47a3f00215725cecd65b21a5ff2e0)
2007-12-19Change ensure_canon_entry_valid() to not take and fsp.Michael Adam1-10/+11
Convert ensure_canon_entry_valid() to take share_params and an is_directory flag instead of an files_struct pointer. Michael (This used to be commit bdb208124bd703edee03ac4d2a4ec45ecdfc135e)
2007-12-19Change apply_default_perms() to not take an fsp.Michael Adam1-14/+15
This is a first change in a series: Pass what is needed instead of files_struct pointers to some functions. This is in preparation of introducing two variants of get_nt_acl - one for fname (which does not need an fsp), one for file descriptor. This changes apply_default_perms to take share_params (rather thatn snum) and an is_directory flag instead of an fsp. Michael (This used to be commit d7e2e93758f6598a0459db3255300558618f066e)
2007-12-19Remove Get_Pwnam and its associated static variableVolker Lendecke4-6/+18
All callers are replaced by Get_Pwnam_alloc (This used to be commit 735f59315497113aebadcf9ad387e3dbfffa284a)
2007-12-18Remove last_message completely as it's no longer used.Jeremy Allison2-9/+0
Jeremy. (This used to be commit c378c3edc1197d46c5d6eb2bcabbf9e774c03ffc)
2007-12-18Add a in-memory cacheVolker Lendecke4-200/+112
This is a more general API that caches data with a LRU scheme. See include/cache.h. No comments yet, I'm still working on it. But Jeremy has given me a hint in one of his checkins that he would like to make use of this now. The idea is that we get rid of all our silly little caches and merge them all into one cache that we can then very easily trim, for example even with a smbcontrol message if someone decides memory is tight. The main user is the stat cache, this patch also converts the getwd cache. More caches to come. (This used to be commit 7a911b35713538d82001a3c9f34152e293fe1943)
2007-12-17Remove more static fstrings (yes this little cache should beJeremy Allison1-19/+49
in the rbtree....). Jeremy. (This used to be commit 97cfdae4052d46a35040d4c1a4ade8bf2c41dbc7)
2007-12-17Fix bug #5121 (unix passwd sync not working on a streams basedJeremy Allison1-7/+7
system). Jeremy. (This used to be commit 545cd2139cfc9484b733693814d4724d37125942)
2007-12-16Remove a static fstring.Jeremy Allison1-20/+30
Jeremy. (This used to be commit 898c56c0ead6331721de9645ce55608cbe7cf34d)
2007-12-16make use of [un]marshall_sec_desc, allow for fd==-1 in get/set_secdescVolker Lendecke1-87/+46
(This used to be commit 585f5f8831f13260808a82611656fc6ca5caee81)
generated by cgit (git 2.34.1) at 2024-12-01 11:50:02 +0000